Red Hat Security AdvisoryRHSA-2018:1253
apr security update
Released 2018-04-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) apr-1.4.8-3.el7_3.1, apr-devel-1.4.8-3.el7_3.1
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) apr-1.3.9-5.el6_7.1
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) apr-devel-1.3.9-5.el6_7.1
- Red Hat Enterprise Linux Server AUS (v. 6.4) apr-1.3.9-5.el6_4.1, apr-devel-1.3.9-5.el6_4.1
- Red Hat Enterprise Linux Server AUS (v. 6.5) apr-1.3.9-5.el6_5.1, apr-devel-1.3.9-5.el6_5.1
- Red Hat Enterprise Linux Server AUS (v. 6.6) apr-1.3.9-5.el6_6.1, apr-devel-1.3.9-5.el6_6.1
- Red Hat Enterprise Linux Server AUS (v. 7.2) apr-1.4.8-3.el7_2.1, apr-devel-1.4.8-3.el7_2.1
- Red Hat Enterprise Linux Server E4S (v. 7.2) apr-1.4.8-3.el7_2.1, apr-devel-1.4.8-3.el7_2.1
- Red Hat Enterprise Linux Server EUS (v. 6.7) apr-1.3.9-5.el6_7.1, apr-1.3.9-5.el6_7.1.ppc, apr-devel-1.3.9-5.el6_7.1 +1
- Red Hat Enterprise Linux Server EUS (v. 7.3) apr-1.4.8-3.el7_3.1, apr-1.4.8-3.el7_3.1.ppc, apr-devel-1.4.8-3.el7_3.1 +1
- Red Hat Enterprise Linux Server TUS (v. 6.6) apr-1.3.9-5.el6_6.1, apr-devel-1.3.9-5.el6_6.1
- Red Hat Enterprise Linux Server TUS (v. 7.2) apr-1.4.8-3.el7_2.1, apr-devel-1.4.8-3.el7_2.1
Fixes 1 record
Priority LOW 35
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_t…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.01749 · Published 2017-10-24 · Partial fix CWE-125
