UbuntuUpdates.org

Package "apr-util"

Name: apr-util

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Apache Portable Runtime Utility Library
  • Apache Portable Runtime Utility Library - SQLite3 Driver
  • Apache Portable Runtime Utility Library - Debugging Symbols
  • Apache Portable Runtime Utility Library - Development Headers
Latest version: 1.6.1-4ubuntu2.2
Release: focal (20.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "apr-util" in Focal

Repository Area Version
base main 1.6.1-4ubuntu2
base universe 1.6.1-4ubuntu2
security universe 1.6.1-4ubuntu2.2
updates main 1.6.1-4ubuntu2.2
updates universe 1.6.1-4ubuntu2.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.6.1-4ubuntu2.2 2023-09-04 12:08:01 UTC

  apr-util (1.6.1-4ubuntu2.2) focal-security; urgency=medium

  * Fix compatibility with MySQL 8.0.34 (LP: #2031548)
    - debian/patches/fix-mysql-8034-compat.patch: don't set
      MYSQL_OPT_RECONNECT as it is deprecated and spews and error message.

 -- Leonidas Da Silva Barbosa <email address hidden> Thu, 31 Aug 2023 14:57:06 -0300
Source diff to previous version

Version: 1.6.1-4ubuntu2.1 2023-02-14 22:07:15 UTC

  apr-util (1.6.1-4ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: integer overflow
     - debian/patches/CVE-2022-25147.patch: add assertions to check if
       a buffer length is bigger than a pre-determined value in
       multiple methods in encoding/apr_base64.c.
     - CVE-2022-25147

 -- Rodrigo Figueiredo Zaiden <email address hidden> Mon, 13 Feb 2023 11:51:37 -0300
CVE-2022-25147 Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond


About   -   Send Feedback to @ubuntu_updates