stable

apr-1.7.5-1.fc40

FEDORA-2024-b40491b84b created by jorton a month ago for Fedora 40

This update to the apr package fixes a security issue in the handling of shared memory permissions.

 SECURITY: CVE-2023-49582: Apache Portable Runtime (APR):
 Unexpected lax shared memory permissions (cve.mitre.org)
 Lax permissions set by the Apache Portable Runtime library on
 Unix platforms would allow local users read access to named
 shared memory segments, potentially revealing sensitive
 application data.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-b40491b84b

This update has been submitted for testing by jorton.

a month ago

This update's test gating status has been changed to 'waiting'.

a month ago

jorton edited this update.

a month ago

This update's test gating status has been changed to 'passed'.

a month ago

This update has been pushed to testing.

a month ago
User Icon bojan commented & provided feedback a month ago
karma

Works.

User Icon derekenz commented & provided feedback a month ago
karma

Works

User Icon derekenz provided feedback a month ago
Test Case apr

This update can be pushed to stable now if the maintainer wishes

a month ago
karma

This update has been submitted for stable by bodhi.

a month ago

This update has been pushed to stable.

4 weeks ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
a month ago
in testing
a month ago
in stable
4 weeks ago
modified
a month ago
approved
a month ago
BZ#2308487 CVE-2023-49582 apr: Lax permissions in Apache Portable Runtime shared memory [fedora-40]
0
0

Automated Test Results

Test Cases

0 1 Test Case apr