Red Hat Security Advisory

RHSA-2017:3270

apr security update

Released 2017-11-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) apr-1.4.8-3.el7_4.1
Red Hat Enterprise Linux Client Optional (v. 7) apr-devel-1.4.8-3.el7_4.1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) apr-1.4.8-3.el7_4.1, apr-devel-1.4.8-3.el7_4.1
Red Hat Enterprise Linux Desktop (v. 6) apr-1.3.9-5.el6_9.1
Red Hat Enterprise Linux Desktop Optional (v. 6) apr-devel-1.3.9-5.el6_9.1
Red Hat Enterprise Linux HPC Node (v. 6) apr-1.3.9-5.el6_9.1
Red Hat Enterprise Linux HPC Node Optional (v. 6) apr-devel-1.3.9-5.el6_9.1
Red Hat Enterprise Linux Server (v. 6) apr-1.3.9-5.el6_9.1, apr-1.3.9-5.el6_9.1.ppc, apr-devel-1.3.9-5.el6_9.1 +1
Red Hat Enterprise Linux Server (v. 7) apr-1.4.8-3.el7_4.1, apr-1.4.8-3.el7_4.1.ppc, apr-devel-1.4.8-3.el7_4.1 +1
Red Hat Enterprise Linux Workstation (v. 6) apr-1.3.9-5.el6_9.1, apr-devel-1.3.9-5.el6_9.1
Red Hat Enterprise Linux Workstation (v. 7) apr-1.4.8-3.el7_4.1, apr-devel-1.4.8-3.el7_4.1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) apr-1.4.8-3.el7_4.1, apr-devel-1.4.8-3.el7_4.1

Fixes 1 record

TI-2017-09338 CVE-2017-12613 · GHSA-v99m-xvmc-cgf3

Out-of-bounds read in Apache Portable Runtime

LOW 35

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.01749 Published 2017-10-24 Partial fix CWE-125