GLSA-201405-24 : Apache Portable Runtime, APR Utility Library: Denial of Service
Medium Nessus Plugin ID 74066
Synopsis
The remote Gentoo host is missing one or more security-related patches.
Description
The remote host is affected by the vulnerability described in GLSA-201405-24 (Apache Portable Runtime, APR Utility Library: Denial of Service)
Multiple vulnerabilities have been discovered in Apache Portable Runtime and APR Utility Library. Please review the CVE identifiers referenced below for details.
Impact :
A remote attacker could cause a Denial of Service condition.
Workaround :
There is no known workaround at this time.
Solution
All Apache Portable Runtime users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=dev-libs/apr-1.4.8-r1' All users of the APR Utility Library should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=dev-libs/apr-util-1.3.10' Packages which depend on these libraries may need to be recompiled.
Tools such as revdep-rebuild may assist in identifying some of these packages.