Unscored USN-5056-1 1 CVE

apr vulnerability

Published Aug 30, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that APR incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	apr	1.5.0-1ubuntu0.1~esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	apr	1.5.2-3ubuntu0.1~esm1

Vulnerabilities 1

Unscored —

CVE-2021-35940

Regression of CVE-2017-12613

An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 a…

Apache Software Foundation Apache Portable Runtime (APR) apr apr Debian Ubuntu Alpine

Aug 23, 2021

References

report
https://ubuntu.com/security/CVE-2021-35940