==========================================================================
Ubuntu Security Notice USN-7038-1
September 26, 2024

apr vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

The system could be made to expose sensitive information.

Software Description:
- apr: Apache Portable Runtime Library

Details:

Thomas Stangner discovered a permission vulnerability in the Apache
Portable Runtime (APR) library. A local attacker could possibly use this
issue to read named shared memory segments, potentially exposing sensitive
application data.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   libapr1-dev                     1.7.2-3.1ubuntu0.1
   libapr1t64                      1.7.2-3.1ubuntu0.1

Ubuntu 22.04 LTS
   libapr1                         1.7.0-8ubuntu0.22.04.2
   libapr1-dev                     1.7.0-8ubuntu0.22.04.2

Ubuntu 20.04 LTS
   libapr1                         1.6.5-1ubuntu1.1
   libapr1-dev                     1.6.5-1ubuntu1.1

Ubuntu 18.04 LTS
   libapr1                         1.6.3-2ubuntu0.1~esm1
                                   Available with Ubuntu Pro
   libapr1-dev                     1.6.3-2ubuntu0.1~esm1
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   libapr1                         1.5.2-3ubuntu0.1~esm2
                                   Available with Ubuntu Pro
   libapr1-dev                     1.5.2-3ubuntu0.1~esm2
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-7038-1
   CVE-2023-49582

Package Information:
   https://launchpad.net/ubuntu/+source/apr/1.7.2-3.1ubuntu0.1
   https://launchpad.net/ubuntu/+source/apr/1.7.0-8ubuntu0.22.04.2
   https://launchpad.net/ubuntu/+source/apr/1.6.5-1ubuntu1.1

Ubuntu 7038-1: APR Security Advisory Updates

September 26, 2024
The system could be made to expose sensitive information.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: The system could be made to expose sensitive information. Software Description: - apr: Apache Portable Runtime Library Details: Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR) library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data.

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS   libapr1-dev                     1.7.2-3.1ubuntu0.1   libapr1t64                      1.7.2-3.1ubuntu0.1 Ubuntu 22.04 LTS   libapr1                         1.7.0-8ubuntu0.22.04.2   libapr1-dev                     1.7.0-8ubuntu0.22.04.2 Ubuntu 20.04 LTS   libapr1                         1.6.5-1ubuntu1.1   libapr1-dev                     1.6.5-1ubuntu1.1 Ubuntu 18.04 LTS   libapr1                         1.6.3-2ubuntu0.1~esm1                                   Available with Ubuntu Pro   libapr1-dev                     1.6.3-2ubuntu0.1~esm1                                   Available with Ubuntu Pro Ubuntu 16.04 LTS   libapr1                         1.5.2-3ubuntu0.1~esm2                                   Available with Ubuntu Pro   libapr1-dev                     1.5.2-3ubuntu0.1~esm2                                   Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7038-1

  CVE-2023-49582

Severity
Ubuntu Security Notice USN-7038-1

Package Information

  https://launchpad.net/ubuntu/+source/apr/1.7.2-3.1ubuntu0.1   https://launchpad.net/ubuntu/+source/apr/1.7.0-8ubuntu0.22.04.2   https://launchpad.net/ubuntu/+source/apr/1.6.5-1ubuntu1.1

Related News

Essential Server Security Security Strategies for Administrators
5 - 9 min read
In the current threat landscape, Linux servers have emerged as a dominant force, underpinning approximately 81% of all websites globally. Despite
Google Chooses Passkeys Over Passwords: Examining the Security Benefits for Linux Users
2 - 4 min read
In a bold move towards a future without traditional passwords, Google has introduced secure passkey sign-ins across almost all devices, including
Linux Security Modules (LSM): SELinux vs AppArmor vs TOMOYO
3 - 6 min read
Linux has long been celebrated for its versatility, robustness, and vast array of security features it offers. A key aspect of maintaining and
Google Chrome 129: Addressing Crucial Vulnerabilities and Enhancing Security
2 - 4 min read
Google Chrome remains the crown jewel in the browser market, with an impressive user base of approximately 3.45 billion. However, this immense
Defending Against Malicious Web Shells: Lessons from the Apache AXIS Server Attack
2 - 4 min read
Hackers have recently been observed actively targeting the Apache AXIS server to deploy malicious web shells, exposing significant vulnerabilities
Emerging Mallox Ransomware Variant Targets Linux Using Kryptina Code
3 - 5 min read
A new variant of the Mallox ransomware, which traditionally targeted Windows systems, has been observed targeting Linux environments. This
TeamTNT Hackers Attacking VPS Servers Running CentOS
3 - 5 min read
Security researchers have recently observed an alarming resurgence of TeamTNT , a notorious hacking group known for targeting cloud infrastructures.
Fighting Back Against Hadooken Malware by Strengthening WebLogic Security
2 - 4 min read
Cybercriminals have been relentlessly attacking the digital landscape, aiming to exploit vulnerabilities in well-known systems. One such exploit is

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved