Changelog for libapr-util1-1.6.1-20.6.x86_64.rpm :
Mon Sep 24 14:00:00 2018 Vítězslav Čížek
- Add missing zlib-devel build dependency which used to be pulled in
by libopenssl-devel

Tue Jun 12 14:00:00 2018
- extend apr-util-mariadb-10.2.patch: Fix detection / build with
MariaDB 10.2. [bsc#1094754]

Wed Nov 22 13:00:00 2017
- Add apr-util-mariadb-10.2.patch: Fix detection / build with
MariaDB 10.2.

Tue Nov 7 13:00:00 2017
- APR-util 1.6.1

* apr_crypto: Fix compatibility with LibreSSL. PR 61596.

* sdbm: better database/page validation to fail cleanly when
corrupted [bsc#1064990], CVE-2017-12618

Tue Oct 17 14:00:00 2017
- We need to obsolete same version of package (bsc#1063305)

Mon Jul 17 14:00:00 2017
- Replace unusual
*.?a match by
- Fix RPM groups, diversify summaries.

Wed Jul 12 14:00:00 2017
- Rename package to apr-util
- Drop baselib.conf as it does not target any supported

Mon Jun 19 14:00:00 2017
- APR-util 1.6.0

* Update MySQL build to stop using libmysqlclient_r

* apr_siphash: Implement keyed hash function SipHash

* apr_buckets: Add apr_bucket_file_set_buf_size()

* apr_crypto: avoid excessive iteration in bcrypt hash.

* apr_xml_to_text: Add style APR_XML_X2T_PARSED.

* see for
extra details

Thu Apr 7 14:00:00 2016
- require just posgresql-devel everywhere, it seems to work now

Thu Feb 4 13:00:00 2016
- require postgresql-devel less then 9.4 to fix build on SLE_12
and SLE_12_SP1

Tue Oct 13 14:00:00 2015
- require postgresql-devel version at least 9.1.0 to fix build for

Sat Oct 18 14:00:00 2014
- fix requires after spec-cleaner

Thu Oct 16 14:00:00 2014
- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches

Wed Sep 17 14:00:00 2014
- version 1.5.4

* MySQL driver: Fix incorrect handling of bad parameter.

* apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.

Thu Nov 21 13:00:00 2013
- version 1.5.3

* Add support to apr_memcache for unix domain sockets.

* Add support for Berkeley DB 6.0.

Wed Aug 28 14:00:00 2013
- Use compiler symbol visibility
- libapr1 does not have symbol
* so requires_ge it

Mon Jul 22 14:00:00 2013
- Update to apr-util 1.5.2

* apr_uri_parse(): Do not accept invalid characters in the scheme.

* Fix memory leak in hook sorting function.

* Fix password validation failure for all crypt and crypt_r based

* Fix potential data corruption in apr_brigade_write()

* Fixes for ap_crypto,memcache etc.. see

Tue Jul 16 14:00:00 2013
- get rid of --parents in doc section

Fri Aug 17 14:00:00 2012
- Needs libuud-devel now

Wed Aug 1 14:00:00 2012
- Apache 2.4.x complains \"Your APR does not include SSL/EVP support.\"
Indeed, that\'s the case, fix it.

Sat Feb 18 13:00:00 2012
- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:

* ) Apply Windows build fixes for the apr_crypto API.
Changes with 1.4.0:

* ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK. PR: 42682

* ) apr_memcache_server_create: Fix possible segfault. PR 51064.

* ) apr_thread_pool: Fix thread unsafe pool usage.

* ) Do not include apr.h and apr_errno.h from system search path in
apu_errno.h. PR 46487

* ) Add optional dbm, openssl and nss subpackages to the RPM spec file.

* ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
or sybdb.h.

* ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
test to verify the interoperability of the two modules. Builds default
to disabled unless explicitly enabled.

* ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
based on the modular dso interface used for dbd and ldap. Initially,
the interface supports symmetrical encryption and decryption. The
purpose of the interface is to offer portable and interoperable
access to basic crypto using the native crypto libraries present on
each platform.

* ) Add trace probes to hooks, making it easier to inspect APR Hook based
applications with DTrace or other such mechanisms.

* ) Implement resource list when threads are unavailable. PR 24325
Changes with 1.3.13:

* ) Fix a failure of configure to detect ldap_set_rebind_proc(),
encountered on Fedora 15 with gcc 4.6.

* ) apr_thread_pool: Fix thread unsafe pool usage.

* ) Improve platform detection for bundled expat by updating
config.guess and config.sub.

* ) Sync libtool handling of bundled expat from APR.

Fri Jan 20 13:00:00 2012
- add Group tag to subpackages

Wed Dec 21 13:00:00 2011
- add autoconf as buildrequire to avoid implicit dependency

Mon Oct 17 14:00:00 2011
- disable testsuite on qemu builds

Wed Oct 12 14:00:00 2011
- fix build on Factory

Thu Sep 15 14:00:00 2011
- set -DLDAP_SET_REBIND_PROC_THREE for callback setting in Factory.

Thu Sep 1 14:00:00 2011
- disable the (void)tmp; cast from %patch1.

Thu May 26 14:00:00 2011
- Update to 1.3.12, single bugfix release

* ) apr_ldap: Fix crash because of NULL cleanup registered by
apr_ldap_rebind_init(). [Rainer Jung]

Fri May 20 14:00:00 2011
- run make check
- fix pkgconfig build requires for auto dependencies

Fri May 20 14:00:00 2011
- Update to aprutil 1.3.11

* SECURITY: CVE-2010-1623 (

* SECURITY: CVE-2009-3560, CVE-2009-3720 (

* apr_thread_pool: Fix some potential deadlock situations. PR 49709.

* apr_thread_pool_create: Fix pool corruption caused by multithreaded
use of the pool when multiple initial threads are created.

Wed May 18 14:00:00 2011
- license update: Apache-2.0
Updating to syntax

Thu Apr 28 14:00:00 2011
- Add libapr-util1-1.3.9-gcc46.patch: fix ldap_set_rebind_proc
detection with gcc 4.6

Tue Dec 15 13:00:00 2009
- add baselibs for SPARC
- add baselibs.conf as a source

Mon Aug 10 14:00:00 2009
- update to 1.3.9:

* ) SECURITY: CVE-2009-2412 (
Fix overflow in rmm, where size alignment was taking place.

* ) Make sure that \"make check\" is used in the RPM spec file, so that
the crypto, dbd and dbm tests pass.

* ) Make sure the mysql version of dbd_mysql_get_entry() respects the
rule that if the column number exceeds the number of columns, we
return NULL.

* ) Ensure the dbm module is packaged up correctly in the RPM.

* ) Clarify the error messages within the dbd tests.

Wed Jul 8 14:00:00 2009
- update to 1.3.8:

* ) Use locally scoped variables in PostgreSQL driver to avoid stomping
on return codes. PR 47431

* ) Fix race conditions in initialisation of DBD, DBM and DSO.

* ) Expose DBM libs in apu-1-config by default. To avoid that, use
apu-1-config --avoid-dbm --libs. To get just DBM libs, use
apu-1-config --dbm-libs.

* ) Make sure --without-ldap works.

Mon Jun 8 14:00:00 2009
- update to 1.3.7

Fix a denial of service attack against the apr_xml_
* interface
using the \"billion laughs\" entity expansion technique.

* ) Minor build and bug fixes.

* ) SECURITY: CVE-2009-0023 (
Fix underflow in apr_strmatch_precompile.

* ) Fix off by one overflow in apr_brigade_vprintf.

* ) APR_LDAP_SIZELIMIT should prefer LDAP_DEFAULT_LIMIT/-1 when the
SDK supports it, but in the absence of LDAP_DEFAULT_LIMIT (and
LDAP_NO_LIMIT/0) it is not safe to use a literal -1.

* ) Clean up ODBC types. Warnings seen when compiling packages for
Fedora 11.

* ) Use of my_init() requires my_global.h and my_sys.h.

* ) Fix apr_memcache_multgetp memory corruption and incorrect error

* ) Fix memcache memory leak with persistent connections.

* ) Add Oracle 11 support.

* ) apr_dbd_freetds: Avoid segfault when process is NULL.
Do no print diagnostics to stderr. Never allow driver to exit

* ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
or sybdb.h.

* ) LDAP detection improvements: --with-ldap now supports library names
containing non-alphanumeric characters, such as New
option --with-lber can be used to override the default liblber name.
Fix a problem reporting the lber library from apu-N-config.

* ) Suppress pgsql column-out-of-range warning.

* ) Fix a buffer overrun and password matching for SHA passwords.

* ) Introduce DSO handling of the db, gdbm and ndbm drivers, so these are
loaded as .so\'s on first demand, unless --disable-util-dso is configured.

* ) Fix a segfault in the DBD testcase when the DBD modules were not present.
- package %{dso_libdir}/apr_dbm_db

Mon Mar 9 13:00:00 2009
- enable build on CentOS5 and RHEL5

Tue Nov 11 13:00:00 2008
- SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf

Thu Oct 30 13:00:00 2008
- obsolete old -XXbit packages (bnc#437293) (

Tue Aug 19 14:00:00 2008
- update to 1.3.4 final
(updating to the release tarball, which has all the patches.)

Fri Aug 15 14:00:00 2008
- remove the incremental patches
since they are included in apr-util-1.3.3.patch

Fri Aug 15 14:00:00 2008
- add apr-1.3.2-r685262.patch to memcache client

* Fix a memory leak introduced in r683756 and a free call to a
non malloced pointer in the case that the platform has no threads.

Fri Aug 8 14:00:00 2008
- the libapr_memcache0 package can be considered obsolete now,
since apr 1.3.x has apr_memcache integrated; I removed it and
added an Obsoletes tag here.

Thu Aug 7 14:00:00 2008
- add pre-1.3.3 patch with all other backports, in preparation to
1.3.3 release. Plus latest version of 1.3.x non-pre_cleanup patch

Thu Aug 7 14:00:00 2008
- add post-1.3.2 patches (backports from trunk committed to the
1.3.x branch)
[#] to be discussed - but seems to work
- drop obsolete workaround about pg_config

Thu Aug 7 14:00:00 2008
- update to 1.3.2

* ) Fix parameter parsing error in ODBC DBD driver. [Tom Donovan]

* ) Older OpenLDAP implementations may have ldap_set_rebind_proc() with two
args. Provide detection code and alternative implementation.
[Ruediger Pluem]

* ) Use pool memory when setting DBD driver name into the hash.
[Bojan Smojver]

* ) Add ODBC DBD Driver. [Tom Donovan]

* ) Fix build of the FreeTDS and MySQL drivers. [Bojan Smojver]

* ) Fix build failure for no modules (--disable-dso). [Jean-Frederic Clere]

* ) Fix win32 build failure for no modules (empty DBD_LIST). [William Rowe]

Thu Jul 17 14:00:00 2008
- add /usr/lib/apr-util-1 directory to RPM filelist.

Mon Jun 16 14:00:00 2008
- pg_config is evil. Make sure it is not used to find PostgreSQL
header files. Fixing build of of the PostgreSQL DBD adapter
onopenSUSE 11.0.

Sun Jun 15 14:00:00 2008
- update to 1.3.0

* ) apr_reslist: destroy all resources in apr_cleanup (don\'t give up on error).
PR 45086 [Nick Kew]

* ) Add apr_brigade_split_ex for reusing existing brigades in situation where
brigades need to be split often during the lifetime of a pool.
[Ruediger Pluem]

* ) Amend apr_reslist to expire resources whose idle time exceeds ttl.
PR 42841 [Tom Donovan, Nick Kew, Ruediger Pluem]

* ) Modularize ldap\'s stub with the dbd dso modular structure, and teach
the apu dso\'s to respect the system specific shared lib path var.
To link to an application without ldap libs, query
`apu-1-config --avoid-ldap --libs` (in addition to the usual linker
queries for compiling and linking). [William Rowe]

* ) Support building DBD drivers as DSOs by default; use --disable-util-dso
flag to configure to use static link. [Joe Orton, Bojan Smojver]

* ) All DBD drivers now count rows from 1, which affects PostgreSQL and MySQL
drivers in particular. Using row number zero is an error.
[Bojan Smojver]

* ) Add support for OpenLDAP\'s ability to support a directory of
certificate authorities. [Eric Covener]

* ) Better error detection for bucket allocation failures.
[Jim Jagielski]

* ) Ensure that the LDAP code can compile cleanly on platforms that do
not define the LDAP_OPT_REFHOPLIMIT symbol, most specifically Windows.
[Victor , Graham Leggett]

* ) Fix the setting of LDAP_OPT_SSL on Win2k, which expects a pointer to
the value LDAP_OPT_ON, and not the value itself. XP works with both.
[Victor ]

* ) Fix a regression in apr_brigade_partition that causes integer overflows
on systems where apr_off_t > apr_size_t. [Ruediger Pluem]

* ) Ensure that apr_uri_unparse does not add scheme to URI if
APR_URI_UNP_OMITSITEPART flag is set. PR 44044
[Michael Clark ]

* ) Add an LDAP rebind implementation so that authentication can be
carried through referrals. [Paul J. Reder]

* ) Fix the make test target in the spec file. [Graham Leggett]

* ) Introduce apr_dbd_open_ex() [Bojan Smojver]

* ) Make md5 hash files portable between EBCDIC and ASCII platforms
[David Jones]

* ) Add limited apr_dbd_freetds driver (MSSQL and Sybase) [Nick Kew]

* ) Commit relicensed apr_dbd_mysql driver to /trunk/ [Nick Kew]

* ) Support BerkeleyDB 4.6. [Arfrever Frehtes Taifersar Arahesis]

* ) Support Tivoli ITDS LDAP client library. [Paul Reder]

* ) Portably implement testdate\'s long-time constants to solve
compilation faults where #LL isn\'t valid. [Curt Arnold]

* ) Use buffered I/O with SDBM. [Joe Schaefer]

* ) Unify parsing of prepared statements and add binary argument functions
to DBD [Bojan Smojver with help from many on the APR list]

* ) Rewrite detection of expat in configure to fix build on e.g. biarch
Linux platforms. PR 28205. [Joe Orton]

* ) Add apr_thread_pool implementation. [Henry Jen ]

* ) Add support for Berkeley DB 4.5 to the configure scripts.
[Garrett Rooney]

* ) Allow apr_queue.h to be included before other APR headers.
PR 40891 [Henry Jen ]

* ) Fix precedence problem in error checking for sdbm dbm back end.
PR 40659 [Larry Cipriani ]

* ) Add an apr_reslist_acquired_count, for determining how many outstanding
resources there are in a reslist. [Ryan Phillips ]

* ) Provide folding in autogenerated .manifest files for Win32 builders
using VisualStudio 2005 [William Rowe]

* ) Implement DBD transaction modes
[Bojan Smojver with help from many on the APR list]

* ) Implement prepared statement support in SQLite3 DBD driver
[Bojan Smojver]

* ) Add get (column) name to apr_dbd API
[Bojan Smojver ] and
[Chris Darroch ]

* ) Make the DBD autoconf-glue use LDFLAGS instead of LIBS in several
places, fixing some configure issues on Solaris.
[Henry Jen ]

* ) Make apr_dbd.h work as a stand alone header, without needing other
files to be included before it. [Henry Jen ]

* ) On platforms that use autoconf stop automatically linking against
apr-iconv when an apr-iconv source dir is found in ../apr-iconv.
Instead, add a --with-apr-iconv option to configure that lets you
specify the relative path to your apr-iconv source directory.
[Garrett Rooney]

* ) APR_FIND_APU macro now supports customisable detailed checks on
each installed apr-util. [Justin Erenkrantz, Colm MacCarthaigh]

* ) APR_FIND_APU macro no longer checks /usr/local/apache2/
[Colm MacCarthaigh]

* ) Add apr_dbd_oracle driver [Nick Kew and Chris Darroch]
- remove obsolete patches:
DSO build is now handled by the build system and it is also the
default now.
- remove manual run of the testsuite, this has also been fixed
- the DBD dsos now live in /usr/lib

Mon Jun 9 14:00:00 2008
- build service supports the debuginfo flag in metadata now; remove
debug_package macro from the specfile therefore.

Thu Apr 10 14:00:00 2008
- added baselibs.conf file to build xxbit packages
for multilib support

Wed Jan 23 13:00:00 2008
- re-fix build of apr_dbd_mysql module on SLES_9 (must have been
broken on Tue Aug 21 2007)

Wed Jan 23 13:00:00 2008
- fix DSO build so it doesn\'t incur linkage to the database libs,
which happened since the 1.2.12, and which I hadn\'t time to fix
yet. Patches from PLD and Oden Eriksson (Mandrake) very much
+Patch10: apr-util-1.2.12-no_linkage.patch
+Patch11: apr-util-1.2.12-dso.patch
+Patch12: apr-util-1.2.12-link.patch
- another patch was rebased and renamed:
- Patch: apr-util-1.2.7.diff
+Patch: apr-util-1.2.12-ac_configure_args.patch
- build DSOs manually (by changing to not make
dbd/apr_dbd_[^ ]
*\\.lo. Thereby avoiding database symbols in
the resulting libaprutil-1 shared object
- fix up apu-1-config LDFLAGS and INCLUDES in the end
- update the run of testcases
- remove openldap2 from BuildRequires, because that part is the
server component which is never needed for building.
- added requires for openldap2-devel db-devel to the devel
package as apu-1-config returns the libs (change from Factory)

Tue Nov 27 13:00:00 2007
- update to 1.2.12:

* ) Wakeup threads waiting for a reslist resource after a resource was
invalidated. [Ruediger Pluem]

* ) Fix GMT offset for several date formats and add a new format.
[Maxime Petazzoni ]

* ) Numerous fixes to the test/ framework, including better handling of
long size_t comparisons and more consistent Makefile.(in|win) setup
for authoring new tests. [William Rowe]

* ) Win32 build fixes including a scheme, fixes for 64P
model x86_64 compiles and VC8 builds. [William Rowe]

* ) Type mismatch between apr_datum_t and GDBM\'s datum type could
yield a corrupt apr_datum_t when reading from a GDBM database.
PR 43025. [Björn Wiberg , Davi Arnaut]

* ) Add the #define APR_LDAP_SIZELIMIT that is set appropriately
for the LDAP SDK that is being used. Also include ZOS as an
LDAP Platform.
PR 37814. [David Jones , Davi Arnaut]

* ) Fix exported LDFLAGS with new expat detection. PR 43337.
[Justin Erenkrantz]

* ) Add MySQL DBD driver [Nick Kew, Bojan Smojver]
- drop source file apr_dbd_mysql.c, which was distributed
separately until now. Functional changes to the previous version

* added mysql_thread_init() (see

* allow groups=xyz in the DBDParams setting
- drop apr-util-1.2.8-dso.patch, apr-util-1.2.12-dbd.patch,
- adjust apr-util-1.2.8-dbd.patch
- fix empty rpm macro \"helpdir\", which lead to an error

Wed Sep 12 14:00:00 2007
- use debug_package macro only on suse, because it breaks the build
on Mandriva

Mon Sep 10 14:00:00 2007
- update to 1.2.10:

* ) Support BerkeleyDB 4.6. [Arfrever Frehtes Taifersar Arahesis]

* ) Test improvements to validate testmd4 and testdbm, unattended.
[Bojan Smojver]

* ) Ensure that an apr_reslist shrinks back to SMAX via the TTL by
reorganising the resource list from a queue to a stack.
PR 40348. [Christian BOITEL ]

* ) Fix Solaris 2.8+ fdatasync() detection. The fdatasync() function
is marked as part of the Realtime library functions.
PR 37343. [Davi Arnaut]

* ) Change configure\'s expat detection to use standard linker-based
tests, fixing build on e.g. biarch Linux systems. PR 28205.
[Joe Orton, Ruediger Pluem]

* ) Portably implement testdate\'s long-time constants to solve
compilation faults where #LL isn\'t valid. [Curt Arnold]

* ) APR_FIND_APU macro no longer checks /usr/local/apache2/.
PR 42089. [Colm MacCárthaigh]

* ) Fix handling of attribute namespaces in apr_xml_to_text() when
a namespace map is provided. PR 41908. [Joe Orton]
- update apr_dbd_mysql.c to r54
- Rework for unified parsing of prepared statements
- Add binary argument functions
- Update Licensing

Mon Aug 27 14:00:00 2007
- add apr-util-1.2.8-r521327.patch:
dbd/apr_dbd.c (apr_dbd_get_driver): Ensure driver DSOs have the
same lifetime as the hash table. Backport from trunk (r521327)

Tue Aug 21 14:00:00 2007
- first attempt to remove static libraries and libtool crap

Wed Jul 18 14:00:00 2007
- fixed wrong rpm tag (Buildrequires -> Requires libexpat-devel)

Wed Jul 18 14:00:00 2007
- make last fix buildservice compatible
- add debug_package macro in buildservice (will soon be obsolete)

Sat Apr 28 14:00:00 2007
- Add libexpat-devel to build requires.

Wed Dec 20 13:00:00 2006
- fix sqlite plugin building for sqlite2, it wasn\'t linked against
the lib
- work around mysql plugin build on SLES9 with a kludge
(libmysqlclient_r was missing the .so link at SLES9 time

Thu Dec 14 13:00:00 2006
- DSO-ify the build of dbd backends

Thu Dec 14 13:00:00 2006
- add sqlite and pgsql support, and rpm-macroize it

Wed Dec 13 13:00:00 2006
- added apr-util-1.2.8_dbd_mysql_buildconf.patch and
the patch and the additional .c file add mysql support to apr-dbd

Mon Dec 11 13:00:00 2006
- update to 1.2.8

* ) Add support for Berkeley DB 4.5 to the configure scripts.

* ) Allow apr_queue.h to be included before other APR headers.

* ) Implement prepared statement support in SQLite3 DBD driver

* ) Fix to ensure that \"deprecated\" LDAP interfaces are still
exposed if using OpenLDAP 2.3.

* ) Fix incorrect byte order and incorrect timestamp type
in the fallback UUID generator used when no external UUID
generator is detected by APR.

Sat Oct 21 14:00:00 2006
- was removed, look for libexpat.a also in lib64 (214240)
build parallel

Mon Sep 18 14:00:00 2006
- fix Buildrequires on FC and Mandriva

Thu Jun 22 14:00:00 2006
- Don\'t depend on configure args being preserved.

Tue May 30 14:00:00 2006
- fix BuildRequires for Fedora Core
- ditch krb5 from BuildRequires, since it doesn\'t seem to be needed
- use --with-berkeley-db

Tue Apr 25 14:00:00 2006
- upstream 1.2.7. relevant changes:

* ) Fix apr_dbd_init to be safe to call multiple times

* ) Stop trying to link against Berkeley DB by default.
(use --with-berkeley-db)

* ) Stop trying to link against GDBM by default. (use --with-gdbm)

* ) Fix the escape implementations for the sqlite2 and sqlite3 dbd
back ends.

* ) Add support for Berkeley DB 4.4 to the configure scripts.

Wed Jan 25 13:00:00 2006
- converted neededforbuild to BuildRequires

Wed Oct 12 14:00:00 2005
- update to 1.2.2

Thu Sep 29 14:00:00 2005
- update to 1.2.1
- remove -DLDAP_DEPRECATED: all CFLAGS are derived from apr-config

Sun Sep 25 14:00:00 2005

Thu Mar 24 13:00:00 2005
- update to 1.1.2

Fri Feb 25 13:00:00 2005
- package created (1.1.0)