Bump up to 1.3.9.

.cvsignore

@@ -1 +1 @@
-apr-util-1.3.8.tar.bz2
+apr-util-1.3.9.tar.bz2

apr-util-1.3.8.tar.bz2.asc

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.9 (GNU/Linux)
-
-iQIcBAABAgAGBQJKVUuEAAoJEKNIuYR/chSnIZ0P/AjTez6s6wHsR4HN30xDmWHs
-b6T/RedxtAHm5PIPeQEYsb+R+s3QrAh5vUXElGZd/olivaNv6RMNNxn3ewJn6N/f
-SpGqRgzTXGDPcQRW/6g2dG9/o/nGf/bBMlOs9hfg7TEwsrR5QbTurG0DF09oLH6z
-8+5k+NZB7uzWAN8UiWpMg+Tjwh7QCOFeu0f3WtTT/z+n4VFta8YZDGsN2iUOKyCw
-WwcyhW/mFMXWkTwuZvA2Rair9OKyf/2a6WRsMCHm+BCFrGaPqkVC+0aeb/F4QaaH
-epuENbTMjugvfdohCWnYgaj0OkQAHKMNkmJsTrqUa13WP79URaF1TBSuuklDu8TN
-FZvAcqK9lNoftgEKhpmwE/oVSpqtZoJIAOKjAN2wg3mMHYoPPZf3Xd9a6baG+JuL
-5hZ2etPVDR5bX5SJkX1EhK5s3kngUkr27kbdbrzMd2EmGg7sO4SUd4Q3jwrPTRmi
-/w61BV+IGi55dgaMp7RLF6jywmVrS/A9NevFvajX1m8IvxWvmzbhmFRJCPIYFZ2u
-9A8oFrgrDyTje8daDCdWZ+2GU/KPByLdneznWSCytJeWF6Nq7AlXf34riHEdg7LN
-IshTQx3Y8dXFOKo0dIvvBuzjPQPM3vM3R0XCJUJi46UoNdzmTM2ustcGSHqCgk3j
-veMY5Y0SI1ZLwY3YIDe8
-=NZxG
------END PGP SIGNATURE-----

apr-util-1.3.9.tar.bz2.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.9 (GNU/Linux)
+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+=9TqS
+-----END PGP SIGNATURE-----

apr-util.spec

@@ -3,8 +3,8 @@
 
 Summary: Apache Portable Runtime Utility library
 Name: apr-util
-Version: 1.3.8
+Version: 1.3.9
-Release: 3%{?dist}
+Release: 1%{?dist}
 License: ASL 2.0
 Group: System Environment/Libraries
 URL: http://apr.apache.org/
@@ -188,6 +188,11 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/aclocal/*.m4
 
 %changelog
+* Thu Aug  6 2009 Bojan Smojver <bojan@rexursive.com> - 1.3.9-1
+- bump up to 1.3.9
+- CVE-2009-2412
+- allocator alignment fixes
+
 * Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.8-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
 
@@ -212,6 +217,8 @@ rm -rf $RPM_BUILD_ROOT
 
 * Mon Jun  8 2009 Bojan Smojver <bojan@rexursive.com> - 1.3.7-1
 - bump up to 1.3.7
+- CVE-2009-0023
+- "billion laughs" fix of apr_xml_* interface
 
 * Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

sources

@@ -1 +1 @@
-34a0e815cdc2b79bf561468b84ff1aa3  apr-util-1.3.8.tar.bz2
+29dd557f7bd891fc2bfdffcfa081db59  apr-util-1.3.9.tar.bz2