Alma Linux: CVE-2022-25147: Important: apr-util security update (Multiple Advisories)

Alma Linux: CVE-2022-25147: Important: apr-util security update (Multiple Advisories)

Severity

6

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:P)

Published

01/31/2023

Created

05/23/2023

Added

05/23/2023

Modified

01/28/2025

Description

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

Solution(s)

• alma-upgrade-apr-util
• alma-upgrade-apr-util-bdb
• alma-upgrade-apr-util-devel
• alma-upgrade-apr-util-ldap
• alma-upgrade-apr-util-mysql
• alma-upgrade-apr-util-odbc
• alma-upgrade-apr-util-openssl
• alma-upgrade-apr-util-pgsql
• alma-upgrade-apr-util-sqlite

References

• https://attackerkb.com/topics/cve-2022-25147
• CVE - 2022-25147
• https://errata.almalinux.org/8/ALSA-2023-3109.html
• https://errata.almalinux.org/9/ALSA-2023-3147.html