stable

apr-1.7.5-1.fc39

FEDORA-2024-318343049c created by jorton 4 months ago for Fedora 39

This update to the apr package fixes a security issue in the handling of shared memory permissions.

 SECURITY: CVE-2023-49582: Apache Portable Runtime (APR):
 Unexpected lax shared memory permissions (cve.mitre.org)
 Lax permissions set by the Apache Portable Runtime library on
 Unix platforms would allow local users read access to named
 shared memory segments, potentially revealing sensitive
 application data.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-318343049c

This update has been submitted for testing by jorton.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

jorton edited this update.

4 months ago

This update's test gating status has been changed to 'passed'.

4 months ago

This update has been pushed to testing.

4 months ago
User Icon filiperosset commented & provided feedback 3 months ago
karma

no regressions noted

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please login to add feedback.

Metadata
Type
security
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
4 months ago
in testing
4 months ago
in stable
3 months ago
modified
4 months ago
approved
3 months ago
BZ#2308485 CVE-2023-49582 apr: Lax permissions in Apache Portable Runtime shared memory [fedora-39]
0
0

Automated Test Results

Test Cases

0 0 Test Case apr