USN-813-1: apr vulnerability

iBot · #1 (**permalink**) 08-07-2009

Referenced CVEs:
CVE-2009-2412

Description:
=========================================================== Ubuntu Security Notice USN-813-1 August 08, 2009 apr vulnerability CVE-2009-2412 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: libapr1 1.2.11-1ubuntu0.1 Ubuntu 8.10: libapr1 1.2.12-4ubuntu0.1 Ubuntu 9.04: libapr1 1.2.12-5ubuntu0.1 After a standard system upgrade you need to restart any applications using apr, such as Subversion and Apache, to effect the necessary changes. Details follow: Matt Lewis discovered that apr did not properly sanitize its input when allocating memory. If an application using apr processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code as the user invoking the application.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
USN-705-1: NTP vulnerability	iBot	Security Advisories (RSS)	0	01-08-2009 02:50 PM
USN-664-1: Tk vulnerability	iBot	Security Advisories (RSS)	0	11-06-2008 03:50 PM
S-358: DNS Vulnerability	iBot	Security Advisories (RSS)	0	08-18-2008 03:50 PM
USN-608-1: KDE vulnerability	iBot	Security Advisories (RSS)	0	05-06-2008 12:30 PM
S-164: Tk Vulnerability	iBot	Security Advisories (RSS)	0	02-11-2008 05:10 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by