Red Hat Security AdvisoryRHSA-2009:1204
apr and apr-util security update
Released 2009-08-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) apr-1.2.7-11.el5_3.1, apr-1.2.7-11.el5_3.1.i386, apr-1.2.7-11.el5_3.1.ia64 +21
- Red Hat Enterprise Linux AS version 4 apr-0.9.4-24.9.el4_8.2, apr-0.9.4-24.9.el4_8.2.i386, apr-0.9.4-24.9.el4_8.2.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) apr-1.2.7-11.el5_3.1, apr-1.2.7-11.el5_3.1.i386, apr-docs-1.2.7-11.el5_3.1 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) apr-1.2.7-11.el5_3.1, apr-devel-1.2.7-11.el5_3.1, apr-devel-1.2.7-11.el5_3.1.i386 +3
- Red Hat Enterprise Linux Desktop version 4 apr-0.9.4-24.9.el4_8.2, apr-0.9.4-24.9.el4_8.2.i386, apr-devel-0.9.4-24.9.el4_8.2 +5
- Red Hat Enterprise Linux ES version 4 apr-0.9.4-24.9.el4_8.2, apr-0.9.4-24.9.el4_8.2.i386, apr-0.9.4-24.9.el4_8.2.ia64 +9
- Red Hat Enterprise Linux WS version 4 apr-0.9.4-24.9.el4_8.2, apr-0.9.4-24.9.el4_8.2.i386, apr-0.9.4-24.9.el4_8.2.ia64 +9
Fixes 1 record
Priority MEDIUM 58
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or po…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.13781 · Published 2009-08-06 · Fixed CWE-189
