On Mon, Jun 26, 2017 at 4:39 AM, Martin Knoblauch <kn...@knobisoft.de> wrote: > > http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 > > find no mentioning of expat or its removal from the packages.
That is a problem, fixing this now. Thanks for the report! >From the actual Announcement which we failed to publish to the canonical URL http://www.apache.org/dist/apr/Announcement1.x.txt (I'm fixing this now); The Apache Software Foundation and the Apache Portable Runtime Project are proud to announce the General Availability of version 1.6 of the Apache Portable Runtime libraries. Now available from https://apr.apache.org/ are: * The APR Utilities library (APR-UTIL or APU) version 1.6.0 PRINCIPAL CHANGES IN VERSION 1.6 APR-UTIL-1.6.0 There are a number of updates to how APR-UTIL deals with external dependencies: - XML: - Expat sources are no longer bundled, this is now an external dependency. You must install expat on your system to use APR-UTIL (expat is installed as standard on most systems). If you are building APR-UTIL, you may need to obtain expat 2.2 or later from https://libexpat.github.io/ or depending on your system's packaging policies, install their expat-dev or expat-devel package. Note that 2.2 addressed some security vulnerabilities of earlier libexpat project releases. So there it was covered.
