RHSA-2023:3360: Moderate: apr-util security update

First published: Wed May 31 2023(Updated: )

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. "apr-util" is a library which provides additional utility interfaces for APR; including support for XML parsing, LDAP, database interfaces, URI parsing, and more<br>Security Fix(es):<br><li> apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software	Affected Version	How to fix
redhat/apr-util	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-bdb	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-bdb	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-bdb-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-bdb-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-debugsource	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-debugsource	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-devel	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-devel	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-ldap	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-ldap-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-ldap-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-mysql	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-mysql-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-mysql-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-odbc	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-odbc-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-odbc-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-openssl	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-openssl	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-openssl-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-openssl-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-pgsql	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-pgsql-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-pgsql-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-sqlite	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-sqlite-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-sqlite-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-ldap	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-mysql	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-odbc	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-pgsql	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-sqlite	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-bdb	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-bdb-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-debugsource	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-devel	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-ldap	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-ldap-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-mysql	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-mysql-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-odbc	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-odbc-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-openssl	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-openssl-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-pgsql	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-pgsql-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-sqlite	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util-sqlite-debuginfo	<1.6.1-6.el8_4.1	1.6.1-6.el8_4.1
redhat/apr-util	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-bdb	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-bdb-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-debugsource	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-devel	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-ldap	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-ldap-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-mysql	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-mysql-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-odbc	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-odbc-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-openssl	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-openssl-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-pgsql	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-pgsql-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-sqlite	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa
redhat/apr-util-sqlite-debuginfo	<1.6.1-6.el8_4.1.aa	1.6.1-6.el8_4.1.aa

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2023:3360 (Advisory)

agent/severity
agent/type
agent/first-publish-date
agent/last-modified-date
agent/references
agent/title
agent/remedy
agent/softwarecombine
agent/description
agent/event
agent/tags
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2023:3360
agent/software-canonical-lookup
package-manager/redhat

RHSA-2023:3360: Moderate: apr-util security update

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact