USN-7038-2: APR vulnerability
USN-7038-1 fixed a vulnerability in Apache Portable Runtime (APR) library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR) library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7038-2?
USN-7038-2 addresses a permission vulnerability in the Apache Portable Runtime (APR) library that can be exploited by local attackers.
How do I fix USN-7038-2?
To fix USN-7038-2, you should upgrade the libapr1 and libapr1-dev packages to version 1.5.0-1ubuntu0.1~esm2.
What versions of Ubuntu are affected by USN-7038-2?
USN-7038-2 affects Ubuntu 14.04 LTS with the libapr1 and libapr1-dev packages.
Who discovered the vulnerability in USN-7038-2?
The vulnerability addressed in USN-7038-2 was discovered by Thomas Stangner.
Is it safe to use Ubuntu 14.04 after the USN-7038-2 patch?
Yes, after applying the patch from USN-7038-2, Ubuntu 14.04 LTS will be safer against the identified vulnerability.