Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 11 Moderate: 2009-8349 Allocator Alignment Issue Fix

fedora
Calendar Grey August 7, 2009
Dist Fedora Esm H88
Keep informed about the Fedora 11 apr-util software that rectifies memory allocator alignment issues and safeguards against CVE-2009-2412.
CVE-2009-2412: allocator alignment fixes Full details here: https://downloads.apache.org/apr/patches/

Summary

The mission of the Apache Portable Runtime (APR) is to provide a

free library of C data structures and routines. This library

contains additional utility interfaces for APR; including support

for XML, LDAP, database interfaces, URI parsing and more.

Update Information:

CVE-2009-2412: allocator alignment fixes Full details here: https://downloads.apache.org/apr/patches/

Topics%20covered

Topics Covered

security advisory fedora update information software management allocator alignment apache portable runtime april fix

Change Log

* Thu Aug 6 2009 Bojan Smojver - 1.3.9-1 - bump up to 1.3.9 - CVE-2009-2412 - allocator alignment fixes - disable DBM-drivers-as-DSO support * Mon Jun 8 2009 Bojan Smojver - 1.3.7-1 - bump up to 1.3.7 - CVE-2009-0023 - "billion laughs" fix of apr_xml_* interface

References


[ 1 ] Bug #515698 - CVE-2009-2412 apr, apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management https://bugzilla.redhat.com/show_bug.cgi?id=515698

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update apr-util' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: apr-util
Product: Fedora 11
Version: 1.3.9
Release: 1.fc11
URL: https://apr.apache.org/
Summary: Apache Portable Runtime Utility library

Topics%20covered

Topics Covered

security advisory fedora update information software management allocator alignment apache portable runtime april fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here