RHSA-2023:3360: Moderate: apr-util security update
Published May 31, 2023
·Updated
The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. "apr-util" is a library which provides additional utility interfaces for APR; including support for XML parsing, LDAP, database interfaces, URI parsing, and moreSecurity Fix(es): apr-util: out-of-bounds writes in the aprbase64 (CVE-2022-25147) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
72 affected componentsFixes available
redhat/apr-util<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-bdb<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-bdb<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-bdb-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-bdb-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-debugsource<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-debugsource<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-devel<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-devel<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-ldap<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-ldap-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-ldap-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-mysql<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-mysql-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-mysql-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-odbc<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-odbc-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-odbc-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-openssl<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-openssl<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-openssl-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-openssl-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-pgsql<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-pgsql-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-pgsql-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-sqlite<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-sqlite-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-sqlite-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-ldap<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-mysql<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-odbc<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-pgsql<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-sqlite<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-bdb<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-bdb-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-debugsource<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-devel<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-ldap<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-ldap-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-mysql<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-mysql-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-odbc<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-odbc-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-openssl<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-openssl-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-pgsql<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-pgsql-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-sqlite<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util-sqlite-debuginfo<1.6.1-6.el8_4.1
1.6.1-6.el8_4.1
redhat/apr-util<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-bdb<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-bdb-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-debugsource<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-devel<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-ldap<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-ldap-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-mysql<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-mysql-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-odbc<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-odbc-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-openssl<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-openssl-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-pgsql<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-pgsql-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-sqlite<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
redhat/apr-util-sqlite-debuginfo<1.6.1-6.el8_4.1.aa
1.6.1-6.el8_4.1.aa
Remediation
Event History
May 29, 2026
Advisory Published
via Red Hat·11:15 PM
Data Sourced
via Red Hat·11:15 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2023:3360?
The severity of RHSA-2023:3360 is categorized as a high risk affecting the Apache Portable Runtime (APR).
2
How do I fix RHSA-2023:3360?
To fix RHSA-2023:3360, update the affected package to version 1.6.1-6.el8_4.1 or newer.
3
Which packages are affected by RHSA-2023:3360?
Affected packages include apr-util, apr-util-bdb, apr-util-devel, apr-util-ldap, and several others listed in the advisory.
4
Is there a workaround for RHSA-2023:3360?
There is no specific workaround for RHSA-2023:3360; updating to the fixed version is recommended.
5
When was RHSA-2023:3360 released?
RHSA-2023:3360 was released on October 3, 2023.