Bug Fix Advisory apr-util bug fix update

Advisory: RHBA-2008:0051-2
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2008-07-24
Last updated on: 2008-07-24
Affected Products: Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)
OVAL: N/A

Details

An updated apr-util package that fixes a bug is now available.

apr-util is a utility library which is used with the Apache Portable
Runtime.

This updated package addresses the following bug:

* XML attribute namespace handling in the apr_xml interface could cause
malformed WebDAV responses to be sent from the mod_dav module if a
particular property name or value was used. This is a rare but severe
problem which can be triggered by particular uses of RDF with WebDAV.

Users are advised to upgrade to this updated apr-util package which
resolves this issue.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188


Updated packages

Red Hat Desktop (v. 4)

SRPMS:
apr-util-0.9.4-22.el4.src.rpm     cfd8c059f394fecece1f0420e52e6778
 
IA-32:
apr-util-0.9.4-22.el4.i386.rpm     8b5bfbfea04366f4e473089adb21c552
apr-util-devel-0.9.4-22.el4.i386.rpm     06db8a8e18e4be81259aec6dffda07ed
 
x86_64:
apr-util-0.9.4-22.el4.x86_64.rpm     31a954ecce8eb2523fa2c792c469f267
apr-util-devel-0.9.4-22.el4.x86_64.rpm     5698b39685cc3cb497f5a6c02169c3b4
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
apr-util-0.9.4-22.el4.src.rpm     cfd8c059f394fecece1f0420e52e6778
 
IA-32:
apr-util-0.9.4-22.el4.i386.rpm     8b5bfbfea04366f4e473089adb21c552
apr-util-devel-0.9.4-22.el4.i386.rpm     06db8a8e18e4be81259aec6dffda07ed
 
IA-64:
apr-util-0.9.4-22.el4.ia64.rpm     77468fcc78c236233fa6bb20222c8b31
apr-util-devel-0.9.4-22.el4.ia64.rpm     67e142ca0891dd97fb799ae80d37c8d1
 
PPC:
apr-util-0.9.4-22.el4.ppc.rpm     02fa2c1f00b8f3512ab145a8d039a32c
apr-util-devel-0.9.4-22.el4.ppc.rpm     e1c57561c87f2d6dd8a0fe5971bf9692
 
s390:
apr-util-0.9.4-22.el4.s390.rpm     6449be4ced885f6487099e70ede4e29f
apr-util-devel-0.9.4-22.el4.s390.rpm     8f52610223db2a3537d3c746fc99f081
 
s390x:
apr-util-0.9.4-22.el4.s390x.rpm     570c5412c4009c6902421f9deacd9896
apr-util-devel-0.9.4-22.el4.s390x.rpm     3400cb3772f581363b181f3bf9406280
 
x86_64:
apr-util-0.9.4-22.el4.x86_64.rpm     31a954ecce8eb2523fa2c792c469f267
apr-util-devel-0.9.4-22.el4.x86_64.rpm     5698b39685cc3cb497f5a6c02169c3b4
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
apr-util-0.9.4-22.el4.src.rpm     cfd8c059f394fecece1f0420e52e6778
 
IA-32:
apr-util-0.9.4-22.el4.i386.rpm     8b5bfbfea04366f4e473089adb21c552
apr-util-devel-0.9.4-22.el4.i386.rpm     06db8a8e18e4be81259aec6dffda07ed
 
IA-64:
apr-util-0.9.4-22.el4.ia64.rpm     77468fcc78c236233fa6bb20222c8b31
apr-util-devel-0.9.4-22.el4.ia64.rpm     67e142ca0891dd97fb799ae80d37c8d1
 
x86_64:
apr-util-0.9.4-22.el4.x86_64.rpm     31a954ecce8eb2523fa2c792c469f267
apr-util-devel-0.9.4-22.el4.x86_64.rpm     5698b39685cc3cb497f5a6c02169c3b4
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
apr-util-0.9.4-22.el4.src.rpm     cfd8c059f394fecece1f0420e52e6778
 
IA-32:
apr-util-0.9.4-22.el4.i386.rpm     8b5bfbfea04366f4e473089adb21c552
apr-util-devel-0.9.4-22.el4.i386.rpm     06db8a8e18e4be81259aec6dffda07ed
 
IA-64:
apr-util-0.9.4-22.el4.ia64.rpm     77468fcc78c236233fa6bb20222c8b31
apr-util-devel-0.9.4-22.el4.ia64.rpm     67e142ca0891dd97fb799ae80d37c8d1
 
x86_64:
apr-util-0.9.4-22.el4.x86_64.rpm     31a954ecce8eb2523fa2c792c469f267
apr-util-devel-0.9.4-22.el4.x86_64.rpm     5698b39685cc3cb497f5a6c02169c3b4
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

234854 - attribute namespace serialization bug



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/