SUSE-SU-2018:1322-1

LOW3.4

Security update for libapr1

Published May 16, 2018

Modified 8 years ago

Fix available

Details

Description of the patch:

This update fixes the following issues:

CVE-2017-12613: DoS or information disclosure in pr_exp_time*() or apr_os_exp_time*() functions (bsc#1064982).

Affected Packages

libapr1

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.3.3-11.18.19.13.2

libapr1-devel

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4SUSE Studio Onsite 1.3

Fixed in:

1.3.3-11.18.19.13.2

libapr1-devel-32bit

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.3.3-11.18.19.13.2

References

ADVISORY

https://bugzilla.suse.com/1064982

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2018-May/004058.html

ADVISORY

https://www.suse.com/security/cve/CVE-2017-12613/

WEB

https://www.suse.com/support/security/rating/

ADVISORY