Oracle alert ELSA-2023-3147 (apr-util)

From:
             
 
Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com>
To:
             
 
el-errata@oss.oracle.com
Subject:
             
 
[El-errata] ELSA-2023-3147 Important: Oracle Linux 9 apr-util security update
Date:
             
 
Thu, 18 May 2023 02:05:46 -0700
Message-ID:
             
 
<mailman.15.1684400756.7405.el-errata@oss.oracle.com>
Oracle Linux Security Advisory ELSA-2023-3147

http://linux.oracle.com/errata/ELSA-2023-3147.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
apr-util-1.6.1-20.el9_2.1.i686.rpm
apr-util-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-bdb-1.6.1-20.el9_2.1.i686.rpm
apr-util-bdb-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-devel-1.6.1-20.el9_2.1.i686.rpm
apr-util-devel-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-ldap-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-mysql-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-odbc-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-openssl-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-pgsql-1.6.1-20.el9_2.1.x86_64.rpm
apr-util-sqlite-1.6.1-20.el9_2.1.x86_64.rpm

aarch64:
apr-util-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-bdb-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-devel-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-ldap-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-mysql-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-odbc-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-openssl-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-pgsql-1.6.1-20.el9_2.1.aarch64.rpm
apr-util-sqlite-1.6.1-20.el9_2.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//apr-util-1.6.1-2...

Related CVEs:

CVE-2022-25147




Description of changes:

[1.6.1-20.1]
- Resolves: #2196575 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata