X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.6 required=5.0	tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE
X-Spam-Check-By: sourceware.org
Message-ID: <4E7B75F5.10600@acm.org>
Date: Thu, 22 Sep 2011 10:52:53 -0700
From: David Rothenberger <daveroth AT acm DOT org>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0.2) Gecko/20110902 Thunderbird/6.0.2
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] [SECURITY] Updated: {apr1,libapr1,libapr1-devel}-1.4.5-1
References: <70952A932255A2489522275A628B97C311773C7E AT xmb-sjc-233 DOT amer DOT cisco DOT com>
In-Reply-To: <70952A932255A2489522275A628B97C311773C7E@xmb-sjc-233.amer.cisco.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Reply-To: cygwin AT cygwin DOT com
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On 9/22/2011 10:16 AM, Matt Seitz (matseitz) wrote:
> "David Rothenberger" wrote in message
> news:<announce DOT 4E7A7E56 DOT 8010706 AT acm DOT org>...
>> apr1 has been updated to the latest upstream release. It includes a
>> fix for CVE-2011-1928.
> 
> Does this update introduce a dependence on the "file" and "libserf"
> packages?
> 
> When I run "setup.exe" and view the "Pending" updates I see the libapr
> updates listed, but I also see the "file" and "libserf" packages listed,
> with the "Current" fields blank.

No, that is likely due to the new experimental subversion-1.7.0rc3-1
release which will be announced soon. These are new dependencies for
1.7.0-rc3, but since the Cygwin setup program doesn't support different
dependencies for different versions of a package, it will attempt to
install them if you have subversion-1.6.17-1 installed.

-- 
David Rothenberger  ----  daveroth AT acm DOT org

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple