| Revision Date: | 2017-11-28 | Version: | 637 |
| Title: | RHSA-2017:3270: apr security update (Important) |
| Description: | The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines.
Security Fix(es):
An out-of-bounds array dereference was found in apr_time_exp_get(). An attacker could abuse an unvalidated usage of this function to cause a denial of service or potentially lead to data leak. (CVE-2017-12613)
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | CVE-2017-12613
RHSA-2017:3270
RHSA-2017:3270-00
RHSA-2017:3270-01
|
| Platform(s): | Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
| Product(s): | |
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed OR Package Information
Red Hat Enterprise Linux 6 is installed
AND
apr is earlier than 0:1.3.9-5.el6_9.1
AND apr is signed with Red Hat redhatrelease2 key
apr-devel is earlier than 0:1.3.9-5.el6_9.1
AND apr-devel is signed with Red Hat redhatrelease2 key
OR Package Information
Red Hat Enterprise Linux 7 is installed
AND
apr is earlier than 0:1.4.8-3.el7_4.1
AND apr is signed with Red Hat redhatrelease2 key
apr-devel is earlier than 0:1.4.8-3.el7_4.1
AND apr-devel is signed with Red Hat redhatrelease2 key
|