The system could be made to expose sensitive information.. ========================================================================== Ubuntu Security Notice USN-7038-2 October 16, 2024 apr vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: The system could be made to expose sensitive information. Software Description: - apr: Apache Portable Runtime Library Details: USN-7038-1 fixed a vulnerability in Apache Portable Runtime (APR) library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR) library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS libapr1 1.5.0-1ubuntu0.1~esm2 Available with Ubuntu Pro libapr1-dev 1.5.0-1ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7038-2 https://ubuntu.com/security/notices/USN-7038-1 CVE-2023-49582 . A critical vulnerability in Ubuntu's APR library poses risks to sensitive data access. Users should update systems promptly to shield against exploits.. APR Security Advisory, Ubuntu 14.04 Update, Sensitive Information Exposure. . LinuxSecurity.com Team
This update includes an updated libtool script to synchronize with the gcc 4.0.1 update.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-636 2005-07-27 ---------------------------------------------------------------------Product : Fedora Core 4 Name : apr Version : 0.9.6 Release : 3.1 Summary : Apache Portable Runtime library Description : The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2. ---------------------------------------------------------------------Update Information: This update includes an updated libtool script to synchronize with the gcc 4.0.1 update. ---------------------------------------------------------------------* Tue Jul 26 2005 Joe Orton 0.9.6-3.1 - rebuild for new gcc ---------------------------------------------------------------------This update can be downloaded from: dd7c3dd24a5104bfaf0306704c328184 SRPMS/apr-0.9.6-3.1.src.rpm d2c78fee6749e882443e99982c376715 ppc/apr-0.9.6-3.1.ppc.rpm ff9a57982d8a2c88950e66e40d2aa14c ppc/apr-devel-0.9.6-3.1.ppc.rpm 13601fe4ecaf3f26c24d6ab8c96829ae ppc/debug/apr-debuginfo-0.9.6-3.1.ppc.rpm 379908eb9a22194cae703d3f6dc446c3 ppc/apr-0.9.6-3.1.ppc64.rpm 7ce0fa537f658bb9ac43b5dbc1d0f38c x86_64/apr-0.9.6-3.1.x86_64.rpm 0a5f2f241746b1c764117861527ccfaa x86_64/apr-devel-0.9.6-3.1.x86_64.rpm 95ac9d204d8a3fe15d3483a69c201155 x86_64/debug/apr-debuginfo-0.9.6-3.1.x86_64.rpm 29a5e1475389f0a61a02b0a548fddc5e x86_64/apr-0.9.6-3.1.i386.rpm 29a5e1475389f0a61a02b0a548fddc5e i386/apr-0.9.6-3.1.i386.rpm 9483fab79afbdee821d23db6cb28c53a i386/apr-devel-0.9.6-3.1.i386.rpm 5a67cf90a64e6c77b4fab9d118c2d762 i386/debug/apr-debuginfo-0.9.6-3.1.i386.rpm This update can also be installed with the Update Agent; youcan launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Get the latest Linux and open source security news straight to your inbox.