summaryrefslogtreecommitdiff
path: root/devel/apr/patches/patch-time_unix_time.c
AgeCommit message (Collapse)AuthorFilesLines
2021-11-28Add a patch to deal with CVE-2021-35940.he1-0/+30
An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue. https://svn.apache.org/viewvc?view=revision&revision=1891198 Bump PKGREVISION.