Apache APR and APR-util Multiple Integer Overflow Vulnerabilities

Bugtraq ID:	35949
Class:	Design Error
CVE:	CVE-2009-2412
Remote:	Yes
Local:	No
Published:	Aug 05 2009 12:00AM
Updated:	Apr 13 2015 09:40PM
Credit:	Matt Lewis
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 DEBUGINFO SuSE SUSE Linux Enterprise Server 11 SuSE SUSE Linux Enterprise Server 10 SP3 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise SDK 10 SP3 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP3 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris Build Snv 111B Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 rPath rPath Linux 2 rPath rPath Linux 1 Redhat JBoss Enterprise Web Server EL4 0 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux EUS 5.3.z server Redhat Enterprise Linux ES 4.8.z Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4.8.z Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Certificate Server 7.3 Pardus Linux 2009 0 Pardus Linux 2008 0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 IBM Websphere Application Server 6.0.1 IBM HTTP Server 2.0.47 .1 IBM HTTP Server 2.0.47 IBM HTTP Server 7.0 Gentoo Linux Fujitsu INTERSTAGE Studio Enterprise Edition 9.2 Fujitsu INTERSTAGE Studio Enterprise Edition 9.1 Fujitsu INTERSTAGE Studio Enterprise Edition 9.0 Fujitsu INTERSTAGE Studio Enterprise Edition 9.1.0 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.3.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.2 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 A Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1.0B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.2 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 A Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1.0B Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Blue Coat Systems Director 5.2.2 .5 Blue Coat Systems Director 4.2.2 .4 Blue Coat Systems Director 5.5 Blue Coat Systems Director 5.4 Blue Coat Systems Director 0 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.6 Apple Mac OS X 10.5 Apache APR-util 1.3.8 Apache APR-util 1.3.7 Apache APR-util 1.3.6 Apache APR-util 1.3.5 Apache APR-util 1.3.4 Apache APR-util 0.9.17 Apache APR-util 0.9.16 Apache APR-util 0.9.7 Apache Apache Portable Runtime 1.3.7 Apache Apache Portable Runtime 0.9.18 Apache Apache 2.2.12 Apache Apache 2.2.11 Apache Apache 2.2.10 Apache Apache 2.2.9 Apache Apache 2.2.8 Apache Apache 2.2.6 Apache Apache 2.2.5 Apache Apache 2.2.4 Apache Apache 2.2.3 Apache Apache 2.2 Apache Apache 2.2.7-dev Apache Apache 2.2.6-dev Apache Apache 2.2.5-dev Apache Apache 2.2.1
Not Vulnerable:	Sun OpenSolaris build snv_122 Blue Coat Systems Director 5.5.2.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X 10.6.2

Apache APR and APR-util Multiple Integer Overflow Vulnerabilities

Apache APR (Apache Portable Runtime) and 'APR-util' are prone to multiple integer-overflow vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of an application that uses the affected library. Successful exploits will compromise the affected application and possibly the computer. Failed attacks will cause denial-of-service conditions.

Apache APR and APR-util Multiple Integer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache APR and APR-util Multiple Integer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libapr1-dbg_1.2.12-4ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dbg_1.2.12-4ubuntu0.1_ powerpc.deb


• Ubuntu libapr1-dev_1.2.12-4ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dev_1.2.12-4ubuntu0.1_ powerpc.deb


• Ubuntu libapr1_1.2.12-4ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1_1.2.12-4ubuntu0.1_powe rpc.deb


• Ubuntu libaprutil1-dbg_1.2.12+dfsg-7ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dbg_1.2.12+df sg-7ubuntu0.3_powerpc.deb


• Ubuntu libaprutil1-dev_1.2.12+dfsg-7ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dev_1.2.12+df sg-7ubuntu0.3_powerpc.deb


• Ubuntu libaprutil1_1.2.12+dfsg-7ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1_1.2.12+dfsg-7 ubuntu0.3_powerpc.deb

Debian Linux 5.0 alpha

• Debian libapr1-dbg_1.2.12-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12- 5+lenny1_alpha.deb


• Debian libapr1-dev_1.2.12-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12- 5+lenny1_alpha.deb


• Debian libapr1_1.2.12-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+le nny1_alpha.deb


• Debian libaprutil1-dbg_1.2.12+dfsg-8+lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.12+dfsg-8+lenny4_alpha.deb


• Debian libaprutil1-dev_1.2.12+dfsg-8+lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.12+dfsg-8+lenny4_alpha.deb


• Debian libaprutil1_1.2.12+dfsg-8+lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.12+dfsg-8+lenny4_alpha.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libapr1-dbg_1.2.12-5ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dbg_1.2.12-5ubuntu0.1_ sparc.deb


• Ubuntu libapr1-dev_1.2.12-5ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dev_1.2.12-5ubuntu0.1_ sparc.deb


• Ubuntu libapr1_1.2.12-5ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1_1.2.12-5ubuntu0.1_spar c.deb


• Ubuntu libaprutil1-dbg_1.2.12+dfsg-8ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dbg_1.2.12+df sg-8ubuntu0.3_sparc.deb


• Ubuntu libaprutil1-dev_1.2.12+dfsg-8ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dev_1.2.12+df sg-8ubuntu0.3_sparc.deb


• Ubuntu libaprutil1_1.2.12+dfsg-8ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1_1.2.12+dfsg-8 ubuntu0.3_sparc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libapr1-dbg_1.2.12-4ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dbg_1.2.12-4ubuntu0.1_ sparc.deb


• Ubuntu libapr1-dev_1.2.12-4ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dev_1.2.12-4ubuntu0.1_ sparc.deb


• Ubuntu libapr1_1.2.12-4ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1_1.2.12-4ubuntu0.1_spar c.deb


• Ubuntu libaprutil1-dbg_1.2.12+dfsg-7ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dbg_1.2.12+df sg-7ubuntu0.3_sparc.deb


• Ubuntu libaprutil1-dev_1.2.12+dfsg-7ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dev_1.2.12+df sg-7ubuntu0.3_sparc.deb


• Ubuntu libaprutil1_1.2.12+dfsg-7ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1_1.2.12+dfsg-7 ubuntu0.3_sparc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu libapr1-dbg_1.2.12-5ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dbg_1.2.12-5ubuntu0.1_ lpia.deb


• Ubuntu libapr1-dev_1.2.12-5ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1-dev_1.2.12-5ubuntu0.1_ lpia.deb


• Ubuntu libapr1_1.2.12-5ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/a/apr/libapr1_1.2.12-5ubuntu0.1_lpia .deb


• Ubuntu libaprutil1-dbg_1.2.12+dfsg-8ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dbg_1.2.12+df sg-8ubuntu0.3_lpia.deb


• Ubuntu libaprutil1-dev_1.2.12+dfsg-8ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dev_1.2.12+df sg-8ubuntu0.3_lpia.deb


• Ubuntu libaprutil1_1.2.12+dfsg-8ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1_1.2.12+dfsg-8 ubuntu0.3_lpia.deb

Debian Linux 5.0 armel

• Debian libapr1-dbg_1.2.12-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12- 5+lenny1_armel.deb


• Debian libapr1-dev_1.2.12-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12- 5+lenny1_armel.deb


• Debian libapr1_1.2.12-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+le nny1_armel.deb


• Debian libaprutil1-dbg_1.2.12+dfsg-8+lenny4_armel.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.12+dfsg-8+lenny4_armel.deb


• Debian libaprutil1-dev_1.2.12+dfsg-8+lenny4_armel.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.12+dfsg-8+lenny4_armel.deb


• Debian libaprutil1_1.2.12+dfsg-8+lenny4_armel.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.12+dfsg-8+lenny4_armel.deb

S.u.S.E. openSUSE 11.0

• S.u.S.E. apache2-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/apache2-2.2.8-28.8.i 586.rpm


• S.u.S.E. apache2-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/apache2-2.2.8-28.8.pp c.rpm


• S.u.S.E. apache2-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/apache2-2.2.8-28.8 .x86_64.rpm


• S.u.S.E. apache2-debuginfo-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/i586/apache2-debugi nfo-2.2.8-28.8.i586.rpm


• S.u.S.E. apache2-debuginfo-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/ppc/apache2-debugin fo-2.2.8-28.8.ppc.rpm


• S.u.S.E. apache2-debuginfo-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/x86_64/apache2-debu ginfo-2.2.8-28.8.x86_64.rpm


• S.u.S.E. apache2-debugsource-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/i586/apache2-debugs ource-2.2.8-28.8.i586.rpm


• S.u.S.E. apache2-debugsource-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/ppc/apache2-debugso urce-2.2.8-28.8.ppc.rpm


• S.u.S.E. apache2-debugsource-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/x86_64/apache2-debu gsource-2.2.8-28.8.x86_64.rpm


• S.u.S.E. apache2-devel-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/apache2-devel-2.2.8- 28.8.i586.rpm


• S.u.S.E. apache2-devel-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/apache2-devel-2.2.8-2 8.8.ppc.rpm


• S.u.S.E. apache2-devel-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/apache2-devel-2.2. 8-28.8.x86_64.rpm


• S.u.S.E. apache2-doc-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/apache2-doc-2.2.8-28 .8.i586.rpm


• S.u.S.E. apache2-doc-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/apache2-doc-2.2.8-28. 8.ppc.rpm


• S.u.S.E. apache2-doc-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/apache2-doc-2.2.8- 28.8.x86_64.rpm


• S.u.S.E. apache2-example-pages-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/apache2-example-page s-2.2.8-28.8.i586.rpm


• S.u.S.E. apache2-example-pages-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/apache2-example-pages -2.2.8-28.8.ppc.rpm


• S.u.S.E. apache2-example-pages-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/apache2-example-pa ges-2.2.8-28.8.x86_64.rpm


• S.u.S.E. apache2-prefork-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/apache2-prefork-2.2. 8-28.8.i586.rpm


• S.u.S.E. apache2-prefork-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/apache2-prefork-2.2.8 -28.8.ppc.rpm


• S.u.S.E. apache2-prefork-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/apache2-prefork-2. 2.8-28.8.x86_64.rpm


• S.u.S.E. apache2-utils-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/apache2-utils-2.2.8- 28.8.i586.rpm


• S.u.S.E. apache2-utils-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/apache2-utils-2.2.8-2 8.8.ppc.rpm


• S.u.S.E. apache2-utils-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/apache2-utils-2.2. 8-28.8.x86_64.rpm


• S.u.S.E. apache2-worker-2.2.8-28.8.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/apache2-worker-2.2.8 -28.8.i586.rpm


• S.u.S.E. apache2-worker-2.2.8-28.8.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/apache2-worker-2.2.8- 28.8.ppc.rpm


• S.u.S.E. apache2-worker-2.2.8-28.8.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/apache2-worker-2.2 .8-28.8.x86_64.rpm


• S.u.S.E. libapr-util1-1.2.12-43.4.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/libapr-util1-1.2.12- 43.4.i586.rpm


• S.u.S.E. libapr-util1-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr-util1-1.2.12-4 3.4.ppc.rpm


• S.u.S.E. libapr-util1-1.2.12-43.4.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/libapr-util1-1.2.1 2-43.4.x86_64.rpm


• S.u.S.E. libapr-util1-64bit-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr-util1-64bit-1. 2.12-43.4.ppc.rpm


• S.u.S.E. libapr-util1-dbd-mysql-1.2.12-43.4.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/libapr-util1-dbd-mys ql-1.2.12-43.4.i586.rpm


• S.u.S.E. libapr-util1-dbd-mysql-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr-util1-dbd-mysq l-1.2.12-43.4.ppc.rpm


• S.u.S.E. libapr-util1-dbd-mysql-1.2.12-43.4.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/libapr-util1-dbd-m ysql-1.2.12-43.4.x86_64.rpm


• S.u.S.E. libapr-util1-dbd-pgsql-1.2.12-43.4.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/libapr-util1-dbd-pgs ql-1.2.12-43.4.i586.rpm


• S.u.S.E. libapr-util1-dbd-pgsql-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr-util1-dbd-pgsq l-1.2.12-43.4.ppc.rpm


• S.u.S.E. libapr-util1-dbd-pgsql-1.2.12-43.4.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/libapr-util1-dbd-p gsql-1.2.12-43.4.x86_64.rpm


• S.u.S.E. libapr-util1-dbd-sqlite3-1.2.12-43.4.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/libapr-util1-dbd-sql ite3-1.2.12-43.4.i586.rpm


• S.u.S.E. libapr-util1-dbd-sqlite3-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr-util1-dbd-sqli te3-1.2.12-43.4.ppc.rpm


• S.u.S.E. libapr-util1-dbd-sqlite3-1.2.12-43.4.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/libapr-util1-dbd-s qlite3-1.2.12-43.4.x86_64.rpm


• S.u.S.E. libapr-util1-debuginfo-1.2.12-43.4.i586.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/i586/libapr-util1-d ebuginfo-1.2.12-43.4.i586.rpm


• S.u.S.E. libapr-util1-debuginfo-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/ppc/libapr-util1-de buginfo-1.2.12-43.4.ppc.rpm


• S.u.S.E. libapr-util1-debuginfo-1.2.12-43.4.x86_64.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/x86_64/libapr-util1 -debuginfo-1.2.12-43.4.x86_64.rpm


• S.u.S.E. libapr-util1-debugsource-1.2.12-43.4.i586.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/i586/libapr-util1-d ebugsource-1.2.12-43.4.i586.rpm


• S.u.S.E. libapr-util1-debugsource-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/ppc/libapr-util1-de bugsource-1.2.12-43.4.ppc.rpm


• S.u.S.E. libapr-util1-debugsource-1.2.12-43.4.x86_64.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/x86_64/libapr-util1 -debugsource-1.2.12-43.4.x86_64.rpm


• S.u.S.E. libapr-util1-devel-1.2.12-43.4.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/libapr-util1-devel-1 .2.12-43.4.i586.rpm


• S.u.S.E. libapr-util1-devel-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr-util1-devel-1. 2.12-43.4.ppc.rpm


• S.u.S.E. libapr-util1-devel-1.2.12-43.4.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/libapr-util1-devel -1.2.12-43.4.x86_64.rpm


• S.u.S.E. libapr-util1-devel-64bit-1.2.12-43.4.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr-util1-devel-64 bit-1.2.12-43.4.ppc.rpm


• S.u.S.E. libapr1-1.2.12-27.2.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/libapr1-1.2.12-27.2. i586.rpm


• S.u.S.E. libapr1-1.2.12-27.2.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr1-1.2.12-27.2.p pc.rpm


• S.u.S.E. libapr1-1.2.12-27.2.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/libapr1-1.2.12-27. 2.x86_64.rpm


• S.u.S.E. libapr1-64bit-1.2.12-27.2.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr1-64bit-1.2.12- 27.2.ppc.rpm


• S.u.S.E. libapr1-debuginfo-1.2.12-27.2.i586.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/i586/libapr1-debugi nfo-1.2.12-27.2.i586.rpm


• S.u.S.E. libapr1-debuginfo-1.2.12-27.2.ppc.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/ppc/libapr1-debugin fo-1.2.12-27.2.ppc.rpm


• S.u.S.E. libapr1-debuginfo-1.2.12-27.2.x86_64.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/x86_64/libapr1-debu ginfo-1.2.12-27.2.x86_64.rpm


• S.u.S.E. libapr1-debugsource-1.2.12-27.2.i586.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/i586/libapr1-debugs ource-1.2.12-27.2.i586.rpm


• S.u.S.E. libapr1-debugsource-1.2.12-27.2.ppc.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/ppc/libapr1-debugso urce-1.2.12-27.2.ppc.rpm


• S.u.S.E. libapr1-debugsource-1.2.12-27.2.x86_64.rpm
  http://download.opensuse.org/debug/update/11.0/rpm/x86_64/libapr1-debu gsource-1.2.12-27.2.x86_64.rpm


• S.u.S.E. libapr1-devel-1.2.12-27.2.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/libapr1-devel-1.2.12 -27.2.i586.rpm


• S.u.S.E. libapr1-devel-1.2.12-27.2.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr1-devel-1.2.12- 27.2.ppc.rpm


• S.u.S.E. libapr1-devel-1.2.12-27.2.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/libapr1-devel-1.2. 12-27.2.x86_64.rpm


• S.u.S.E. libapr1-devel-64bit-1.2.12-27.2.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/libapr1-devel-64bit-1 .2.12-27.2.ppc.rpm

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva apr-util-dbd-freetds-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-ldap-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-mysql-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-odbc-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-pgsql-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-sqlite3-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr-devel-1.3.3-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr-util-devel-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr-util1-1.3.4-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr1-1.3.3-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 mips

• Debian libapr1-dbg_1.2.7-9_mips.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9 _mips.deb


• Debian libapr1-dev_1.2.7-9_mips.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9 _mips.deb


• Debian libapr1_1.2.7-9_mips.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_mip s.deb


• Debian libaprutil1-dbg_1.2.7+dfsg-2+etch3_mips.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.7+dfsg-2+etch3_mips.deb


• Debian libaprutil1-dev_1.2.7+dfsg-2+etch3_mips.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.7+dfsg-2+etch3_mips.deb


• Debian libaprutil1_1.2.7+dfsg-2+etch3_mips.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.7+dfsg-2+etch3_mips.deb

Debian Linux 4.0 arm

• Debian libapr1-dbg_1.2.7-9_arm.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.7-9 _arm.deb


• Debian libapr1-dev_1.2.7-9_arm.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.7-9 _arm.deb


• Debian libapr1_1.2.7-9_arm.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.7-9_arm .deb


• Debian libaprutil1-dbg_1.2.7+dfsg-2+etch3_arm.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.7+dfsg-2+etch3_arm.deb


• Debian libaprutil1-dev_1.2.7+dfsg-2+etch3_arm.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.7+dfsg-2+etch3_arm.deb


• Debian libaprutil1_1.2.7+dfsg-2+etch3_arm.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.7+dfsg-2+etch3_arm.deb

MandrakeSoft Enterprise Server 5

• Mandriva apr-util-dbd-freetds-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-ldap-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-mysql-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-odbc-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-pgsql-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-sqlite3-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libapr-devel-1.3.3-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libapr-util-devel-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libapr-util1-1.3.4-2.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libapr1-1.3.3-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 hppa

• Debian libapr1-dbg_1.2.12-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dbg_1.2.12- 5+lenny1_hppa.deb


• Debian libapr1-dev_1.2.12-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1-dev_1.2.12- 5+lenny1_hppa.deb


• Debian libapr1_1.2.12-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/apr/libapr1_1.2.12-5+le nny1_hppa.deb


• Debian libaprutil1-dbg_1.2.12+dfsg-8+lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.12+dfsg-8+lenny4_hppa.deb


• Debian libaprutil1-dev_1.2.12+dfsg-8+lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.12+dfsg-8+lenny4_hppa.deb


• Debian libaprutil1_1.2.12+dfsg-8+lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.12+dfsg-8+lenny4_hppa.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu libapr1-dbg_1.2.11-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apr/libapr1-dbg_1.2.11-1 ubuntu0.1_i386.deb


• Ubuntu libapr1-dev_1.2.11-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apr/libapr1-dev_1.2.11-1 ubuntu0.1_i386.deb


• Ubuntu libapr1_1.2.11-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apr/libapr1_1.2.11-1ubun tu0.1_i386.deb


• Ubuntu libaprutil1-dbg_1.2.12+dfsg-3ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1-dbg _1.2.12+dfsg-3ubuntu0.2_i386.deb


• Ubuntu libaprutil1-dev_1.2.12+dfsg-3ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1-dev _1.2.12+dfsg-3ubuntu0.2_i386.deb


• Ubuntu libaprutil1_1.2.12+dfsg-3ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1_1.2 .12+dfsg-3ubuntu0.2_i386.deb

MandrakeSoft Corporate Server 3.0

• Mandriva apache2-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-common-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-devel-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-manual-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_cache-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_dav-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_deflate-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_disk_cache-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_file_cache-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_ldap-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_mem_cache-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_proxy-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-mod_ssl-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-modules-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva apache2-source-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libapr0-2.0.48-6.22.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva apr-util-dbd-mysql-1.2.7-6.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-pgsql-1.2.7-6.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva apr-util-dbd-sqlite3-1.2.7-6.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr-util1-1.2.7-6.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr-util1-devel-1.2.7-6.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr1-1.2.7-1.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr1-devel-1.2.7-1.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

Apache APR and APR-util Multiple Integer Overflow Vulnerabilities

References:

• Re: [Fwd: APR Developer Advisory CVE-2009-2412] (William A. Rowe, Jr.)
  
• Apache Portable Runtime Homepage (Apache Software Foundation)
  
• Changes with Apache 2.2.13 (Apache Software Foundation)
  
• CVE-2009-2412 - Multiple integer overflows in the Apache Portable Runtime (APR) (Sun)
  
• CVE-2009-2412 Multiple integer overflows in the Apache Portable Runtime (APR) li (Oracle)
  
• PK96157: SHIP APAR FIXES FOR H28W601 FIX PACK 6.0.2.39. 09/09/14 PTF PECHANGE (IBM)
  
• PM10658: IBM HTTP SERVER 2.0.47 CUMULATIVE INTERIM FIX (IBM)
  
• View of /apr/apr-util/branches/0.9.x/CHANGES (Matt Lewis)
  
• View of /apr/apr-util/branches/1.3.x/CHANGES (Matt Lewis)
  
• View of /apr/apr/branches/0.9.x/CHANGES (Matt Lewis)
  
• View of /apr/apr/branches/1.3.x/CHANGES (Matt Lewis)
  
• Interstage HTTP Server: Four Security Vulnerabilities (CVE-2009-1891/ CVE-2009-2 (Fujitsu)
  
• PK93225: Apache Portable Runtime memory allocation functions can return invalid (IBM)
  
• RHSA-2009:1204 apr and apr-util security update (Red Hat)
  
• RHSA-2009:1462 Moderate: httpd22 security update (Red Hat)
  
• September 13, 2011 - Director multiple Apache vulnerabilities (Blue Coat)