Debian/apr-util: high 7.5
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to c
Action: Upgrade apr-util to 1.3.7+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.7+dfsg-1 | - |
Fixed versions
| 1.3.7+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2009-1955#Debian:14/apr-util
- https://security-tracker.debian.org/tracker/CVE-2009-1955
published · modified · JSON