Red Hat Security AdvisoryRHSA-2023:3145
apr-util security update
Released 2023-05-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) apr-util-1.5.2-6.el7_9.1
- Red Hat Enterprise Linux Client Optional (v. 7) apr-util-devel-1.5.2-6.el7_9.1, apr-util-ldap-1.5.2-6.el7_9.1, apr-util-mysql-1.5.2-6.el7_9.1 +5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) apr-util-1.5.2-6.el7_9.1, apr-util-devel-1.5.2-6.el7_9.1, apr-util-ldap-1.5.2-6.el7_9.1 +6
- Red Hat Enterprise Linux Server (v. 7) apr-util-1.5.2-6.el7_9.1, apr-util-1.5.2-6.el7_9.1.ppc, apr-util-devel-1.5.2-6.el7_9.1 +2
- Red Hat Enterprise Linux Server Optional (v. 7) apr-util-ldap-1.5.2-6.el7_9.1, apr-util-mysql-1.5.2-6.el7_9.1, apr-util-nss-1.5.2-6.el7_9.1 +3
- Red Hat Enterprise Linux Workstation (v. 7) apr-util-1.5.2-6.el7_9.1, apr-util-devel-1.5.2-6.el7_9.1, apr-util-openssl-1.5.2-6.el7_9.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) apr-util-ldap-1.5.2-6.el7_9.1, apr-util-mysql-1.5.2-6.el7_9.1, apr-util-nss-1.5.2-6.el7_9.1 +3
Fixes 1 record
Priority LOW 32
Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01429 · Published 2023-01-31 · Partial fix CWE-190
