delorie.com/archives/browse.cgi | search |
X-Recipient: | archive-cygwin AT delorie DOT com |
X-SWARE-Spam-Status: | No, hits=-1.6 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE |
X-Spam-Check-By: | sourceware.org |
Message-ID: | <4E7B75F5.10600@acm.org> |
Date: | Thu, 22 Sep 2011 10:52:53 -0700 |
From: | David Rothenberger <daveroth AT acm DOT org> |
User-Agent: | Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0.2) Gecko/20110902 Thunderbird/6.0.2 |
MIME-Version: | 1.0 |
To: | cygwin AT cygwin DOT com |
Subject: | Re: [ANNOUNCEMENT] [SECURITY] Updated: {apr1,libapr1,libapr1-devel}-1.4.5-1 |
References: | <70952A932255A2489522275A628B97C311773C7E AT xmb-sjc-233 DOT amer DOT cisco DOT com> |
In-Reply-To: | <70952A932255A2489522275A628B97C311773C7E@xmb-sjc-233.amer.cisco.com> |
X-IsSubscribed: | yes |
Reply-To: | cygwin AT cygwin DOT com |
Mailing-List: | contact cygwin-help AT cygwin DOT com; run by ezmlm |
List-Id: | <cygwin.cygwin.com> |
List-Subscribe: | <mailto:cygwin-subscribe AT cygwin DOT com> |
List-Archive: | <http://sourceware.org/ml/cygwin/> |
List-Post: | <mailto:cygwin AT cygwin DOT com> |
List-Help: | <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs> |
Sender: | cygwin-owner AT cygwin DOT com |
Mail-Followup-To: | cygwin AT cygwin DOT com |
Delivered-To: | mailing list cygwin AT cygwin DOT com |
On 9/22/2011 10:16 AM, Matt Seitz (matseitz) wrote: > "David Rothenberger" wrote in message > news:<announce DOT 4E7A7E56 DOT 8010706 AT acm DOT org>... >> apr1 has been updated to the latest upstream release. It includes a >> fix for CVE-2011-1928. > > Does this update introduce a dependence on the "file" and "libserf" > packages? > > When I run "setup.exe" and view the "Pending" updates I see the libapr > updates listed, but I also see the "file" and "libserf" packages listed, > with the "Current" fields blank. No, that is likely due to the new experimental subversion-1.7.0rc3-1 release which will be announced soon. These are new dependencies for 1.7.0-rc3, but since the Cygwin setup program doesn't support different dependencies for different versions of a package, it will attempt to install them if you have subversion-1.6.17-1 installed. -- David Rothenberger ---- daveroth AT acm DOT org -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
webmaster | delorie software privacy |
Copyright © 2019 by DJ Delorie | Updated Jul 2019 |