UbuntuUpdates.org

Package "apr-util"

Name: apr-util

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Apache Portable Runtime Utility Library
  • Apache Portable Runtime Utility Library - SQLite3 Driver
  • Apache Portable Runtime Utility Library - Debugging Symbols
  • Apache Portable Runtime Utility Library - Development Headers
Latest version: 1.6.1-2ubuntu0.1
Release: bionic (18.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "apr-util" in Bionic

Repository Area Version
base main 1.6.1-2
base universe 1.6.1-2
security universe 1.6.1-2ubuntu0.1
updates main 1.6.1-2ubuntu0.1
updates universe 1.6.1-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.6.1-2ubuntu0.1 2023-02-14 22:07:09 UTC

  apr-util (1.6.1-2ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: integer overflow
     - debian/patches/CVE-2022-25147.patch: add assertions to check if
       a buffer length is bigger than a pre-determined value in
       multiple methods in encoding/apr_base64.c.
     - CVE-2022-25147

 -- Rodrigo Figueiredo Zaiden <email address hidden> Mon, 13 Feb 2023 11:40:15 -0300
CVE-2022-25147 Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond


About   -   Send Feedback to @ubuntu_updates