Pullup ticket 2791 - requested by tron
Security update

Revisions pulled up:
- pkgsrc/devel/apr-util/Makefile	1.10
- pkgsrc/devel/apr-util/distinfo	1.6

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Mon Jun  8 13:19:20 UTC 2009

   Modified Files:
   	pkgsrc/devel/apr-util: Makefile distinfo

   Log Message:
   Update "apr-util" package to version 1.3.7. Changes since version 1.3.4:
   - SECURITY:
     Fix a denial of service attack against the apr_xml_* interface
     using the "billion laughs" entity expansion technique.
   - SECURITY: CVE-2009-0023 (cve.mitre.org)
     Fix underflow in apr_strmatch_precompile.
   - Minor build and bug fixes.
   - SECURITY: CVE-2009-0023 (cve.mitre.org)
     Fix underflow in apr_strmatch_precompile.
   - Fix off by one overflow in apr_brigade_vprintf.
   - APR_LDAP_SIZELIMIT should prefer LDAP_DEFAULT_LIMIT/-1 when the
     SDK supports it, but in the absence of LDAP_DEFAULT_LIMIT (and
     LDAP_NO_LIMIT/0) it is not safe to use a literal -1.
     Bug 23356
   - Clean up ODBC types. Warnings seen when compiling packages for
     Fedora 11.
   - Use of my_init() requires my_global.h and my_sys.h.
   - Fix apr_memcache_multgetp memory corruption and incorrect error
     handling. Bug 46588
   - Fix memcache memory leak with persistent connections.
     Bug 46482
   - Add Oracle 11 support.
   - apr_dbd_freetds: Avoid segfault when process is NULL.
     Do no print diagnostics to stderr. Never allow driver to exit
     process.
   - apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
     or sybdb.h.
   - LDAP detection improvements: --with-ldap now supports library names
     containing non-alphanumeric characters, such as libldap-2.4.so.  New
     option --with-lber can be used to override the default liblber name.
     Fix a problem reporting the lber library from apu-N-config.
   - Suppress pgsql column-out-of-range warning.
   - Fix a buffer overrun and password matching for SHA passwords.
   - Introduce DSO handling of the db, gdbm and ndbm drivers, so these are
     loaded as .so's on first demand, unless --disable-util-dso is configured.
   - Fix a segfault in the DBD testcase when the DBD modules were not present.

   To generate a diff of this commit:
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/devel/apr-util/Makefile
   cvs rdiff -u -r1.5 -r1.6 pkgsrc/devel/apr-util/distinfo


(spz)