Summary
The Apache Portable Runtime (APR) is a portability library used by the
Apache HTTP Server and other projects. apr-util is a library which provides
additional utility interfaces for APR; including support for XML parsing,
LDAP, database interfaces, URI parsing, and more.
Security Fix(es):
* apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | apr-util | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-bdb | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-devel | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-ldap | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-mysql | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-odbc | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-openssl | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-pgsql | 1.6.1-20.el9_2.1 |
| AlmaLinux · 9 | apr-util-sqlite | 1.6.1-20.el9_2.1 |
Vulnerabilities 1
-
Unscored —
Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions
Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.