Changes in v2.9.9:
There is a DoS vulnerability in previous versions, see CVE 2025-47947. This release includes a fix for it.
- fix: DoS vulnerability
[PR from private repo - @theseion, @fzipi, @airween; fixed CVE-2025-47947] - chore: log error codes for global mutex failure modes.
[Issue #3387 - @airween] - chore: refactor build system to use PCRE2
[Issue #3383 - @airween] - feat: add 'make test' to v2's workflow
[Issue #3379 - @airween] - fix: 'make test' is able to run again
[Issue #3378 - @airween] - fix: add PCRE2 capability to standalone module
[Issue #3377 - @airween] - chore: remove unnecessary @LIBXML2_CFLAGS@ from linker flags
[Issue #3376 - @airween] - fix: add msc_fullinfo() to check JIT compilation
[Issue #3375 - @airween] - Fix error logging for standalone module
[Issue #3374 - @RedXanadu] - Fix compiler warnings from GCC
[Issue #3372 - @notroj] - feat: improved XMLArgs processing
[Issue #3358 - @airween] - Incorrect utf8toUnicode transformation for 00xx
[Issue #3284 - @marcstern] - Fixed PCRE2 error message
[Issue #3279 - @marcstern] - make rootpath and incpath consts for apr_filepath_root
[Issue #3270 - @Marcool04] - Fix apr_global_mutex_create() usage
[Issue #3269 - @marcstern] - chore: add 'log' action to rule 200005 (v2/master)
[Issue #3267 - @airween] - Move id_log() to msc_util to fix unit tests; it is declared on msc_ut…
[Issue #3265 - @rainerjung] - Missing #include <time.h>
[Issue #3262 - @marcstern] - Fixed apr_global_mutex_create() usage (no filename)
[PR #3269 - @marcstern] - handle errors from apr_global_mutex_lock
[PR #3257 - @marcstern]
Special thanks to @theseion and @fzipi for their big help, and all other participants.