--===============7026195080000600548==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="k+w/mQv8wyuph6w0"
Content-Disposition: inline


--k+w/mQv8wyuph6w0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-5056-1
August 30, 2021

apr vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 21.04
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM

Summary:

APR could be made to expose sensitive information if it received a specially
 crafted input.

Software Description:
- apr: Apache Portable Runtime Library

Details:

It was discovered that APR incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  libapr1                         1.7.0-6ubuntu0.1

Ubuntu 16.04 ESM:
  libapr1                         1.5.2-3ubuntu0.1~esm1

Ubuntu 14.04 ESM:
  libapr1                         1.5.0-1ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5056-1
  CVE-2021-35940

Package Information:
  https://launchpad.net/ubuntu/+source/apr/1.7.0-6ubuntu0.1

--k+w/mQv8wyuph6w0
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEf+ebRFcoyOoAQoOeRbznW4QLH2kFAmEs/24ACgkQRbznW4QL
H2nG8A//Y41h4DCzWcE9jX7dvnPHhM9nfI292YZ7etYrUFTB6acNIzaSRnefrfwf
hj3QAzO3VS/+60rohh23ZNLmaJ5SHg7FmT4l500P5kaoKVnz9f8GubrBcVFnYCJp
pf4nig+Q+yc7Lij/C5eWuPnoS0OX3ycH7FAY/lt3fjE8YNaskJRcbezvX8dAhnQh
fFtC7+6kbEhrlE93C+fwXfuHu74JwBJhiAYQYbWTIYJnZ6Fqvx749HkHo6SF7aw0
XI0/gEF21fRyA9MClREVaRgbCV9f1Keb+ds64gS5lKOaOspR2iefbttjqibz3nZJ
MhNKMNV5b7XVd3TrFizj2VwLz+xwhIIAjYFETtFJTW2TdG7ZdRCxlyYobR15YTMH
PHSzNJnH+gSoFaLzUUIHJDifuMCjRxgP7lotWZijr/gjCUZsdKhJxksIHPXkL3U5
uPG9F2jJEtnKUMMIDjyQpE8KM4EgxQLScgy6a9OE0s9pKJ/g1OGFhuTt44n0bOLQ
KGRYeV3bbGKqz6wu6A6pDOjfXlEdjYf2sLPvNSkWAF3sygVQqqp8BsbHQLvCkg6C
lLRbo7iBzQKM4cYkh483KoBuiqhdKvAzK44osEOEINfYegNEpf4x7Ae2+knn+lkc
/3RXce1tfQUqcgP0o4JT5XRQk+6w4IsBNj4s85vHWTopcH6kCD4=
=L8Ia
-----END PGP SIGNATURE-----

--k+w/mQv8wyuph6w0--


--===============7026195080000600548==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce