Fedora 9 : apr-util-1.2.12-7.fc9 (2009-6014)

Backport security fixes from upstream version 1.3.7: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion technique. - CVE-2009-1956 Fix off by one overflow in...

Fedora 10 : apr-util-1.3.7-1.fc10 (2009-5969)

Update to upstream version 1.3.7, see: http://svn.apache.org/repos/asf/apr /apr-util/tags/1.3.7/CHANGES Security fixes: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion...

[SECURITY] Fedora 9 Update: apr-util-1.2.12-7.fc9

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

RedHat Security Advisory RHSA-2009:1107

The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for...

CentOS Security Advisory CESA-2009:1107 (apr-util)

The remote host is missing updates to apr-util announced in advisory CESA-2009:1107. CESA-2009:1107 64272 2 $Id: ovcesa20091107.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1107 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1107 (apr-util)

The remote host is missing updates to apr-util announced in advisory CESA-2009:1107. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RedHat Security Advisory RHSA-2009:1107

The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR. Including support for...

Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : apr-util (SSA:2009-167-02)

New apr-util and apr packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. The issues are with apr-util, but older Slackware releases will require a new version of the apr package as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

RHEL 3 : httpd (RHSA-2009:1108)

Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat...

RHEL 4 / 5 : apr-util (RHSA-2009:1107)

Updated apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. apr-util is a utility library used with the Apache Portable Runtime APR. It aims...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

apr-util billion laughs attack

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

Moderate: Red Hat Security Advisory: apr-util security update

Updated apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. apr-util is a utility library used with the Apache Portable Runtime APR. It aims...

apr-util billion laughs attack

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

apr-util

New apr-util and apr packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. The issues are with apr-util, but older Slackware releases will require a new version of the apr package as well. More details about the issues may be found in the Common...

apr-util security update

1.2.7-7.el53.1 - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 504560...

Ubuntu USN-786-1 (apr-util)

The remote host is missing an update to apr-util announced via advisory USN-786-1. OpenVAS Vulnerability Test $Id: ubuntu7861.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7861.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-786-1 apr-util Authors: Thomas...

Ubuntu: Security Advisory (USN-786-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-787-1: Apache vulnerabilities

Matthew Palmer discovered an underflow flaw in apr-util as included in Apache. An attacker could cause a denial of service via application crash in Apache using a crafted SVNMasterURI directive, .htaccess file, or when using modapreq2. This issue only affected Ubuntu 6.06 LTS. CVE-2009-0023 Sande...

Ubuntu 8.04 LTS / 8.10 / 9.04 : apr-util vulnerabilities (USN-786-1)

Matthew Palmer discovered an underflow flaw in apr-util. An attacker could cause a denial of service via application crash in Apache using a crafted SVNMasterURI directive, .htaccess file, or when using modapreq2. Applications using libapreq2 are also affected. CVE-2009-0023 It was discovered tha...