[Bluewhite64 Linux Security] apr-util [BW64SA:20090809-04]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


[Bluewhite64 Linux Security] apr-util [BW64SA:20090809-04]

New apr-util packages are available for Bluewhite64 Linux 11.0, 12.0, 12.1, and
12.2 to fix a security issue.

More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412



Here are the details from the Bluewhite64 Linux 12.2 ChangeLog:
- ----------------------------------------------------------------
PATCHES/packages/apr-util-1.3.9-x86_64-1.tgz: Upgraded.
Fix overflow in rmm, where size alignment was taking place.
[Matt Lewis , Sander Striker]
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412
[*** Security fix ***]



Download the new packages from:
- --------------------------------
For Bluewhite64 Linux 11.0:
http://data.bluewhite64.com/bluewhite64-11.0/patches/packages/apr-util-1.3.9-x86_64-1.tgz

For Bluewhite64 Linux 12.0:
http://data.bluewhite64.com/bluewhite64-12.0/patches/packages/apr-util-1.3.9-x86_64-1.tgz

For Bluewhite64 Linux 12.1:
http://data.bluewhite64.com/bluewhite64-12.1/patches/packages/apr-util-1.3.9-x86_64-1.tgz

For Bluewhite64 Linux 12.2:
http://data.bluewhite64.com/bluewhite64-12.2/patches/packages/apr-util-1.3.9-x86_64-1.tgz

Also, please see the "Get Bluewhite64" section on http://www.bluewhite64.com for
additional mirror sites near you.


MD5 signatures:
- ----------------
Bluewhite64 Linux 11.0 package:
0ca93a17902b14ba77f4c790c8ee2a3d apr-util-1.3.9-x86_64-1.tgz

Bluewhite64 Linux 12.0 package:
b07683a95a5a18d1943a0a854f885961 apr-util-1.3.9-x86_64-1.tgz

Bluewhite64 Linux 12.1 package:
f0b49c26ee8479865a8720f60d3dc648 apr-util-1.3.9-x86_64-1.tgz

Bluewhite64 Linux 12.2 package:
f54a5aa7d3aa0e14218d42a3c0ae371f apr-util-1.3.9-x86_64-1.tgz



Installation instructions:
- ----------------------------
Upgrade the package as root:
# upgradepkg apr-util-1.3.9-x86_64-1.tgz



- ---
Bluewhite64 Linux Security Team
http://bluewhite64.com/gpg-key

security©bluewhite64.com


- ------------------------------------------------------
To leave the bluewhite64-security mailing list:
Send a blank email to

bluewhite64-security-unsubscribe©bluewhite64.com

You will get a confirmation message back containing
instructions to complete the process.

Please do not reply to this email address.
- ------------------------------------------------------





-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkp+e5oACgkQpTOsxuDdlY4sSACcD1OzAvUPjvYbKWxo8Nl60PPJ
a24An06uD3bKgqGQUASb3tPujmaKItPP
=fx9l
-----END PGP SIGNATURE-----