BSD PortsVulnerable: version 1.5.2 is affected by 3 known vulnerabilities. See below.
wip/unimrcp-apr 1.5.2 NetBSD
Patched APR version for UniMRCP
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- apache-2.0
- Categories
- wip, devel
Description
** Patched version of APR-1.5.2 for UniMRCP 1.4.0 **
The Apache Portable Run-time mission is to provide a library of routines that allows programmers to write a program once and be able to compile it anywhere.
In the other systems
The newest version among them is 1.7.6.1.6.3, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | wip/unimrcp-apr | 1.5.2 | 3 known | - | [email protected] | - |
| FreeBSD | devel/apr1 by name | 1.7.6.1.6.3 newest | none known | - | [email protected] | - |
| OpenBSD | devel/apr by name | 1.7.6 | no data | - | Stefan Sperling <[email protected]> | - |
| DragonFly | devel/apr1 by name | 1.7.5.1.6.3_4 | none known | - | [email protected] | - |
| MidnightBSD | devel/apr1 by name | 1.7.5.1.6.3_3 | no data | - | [email protected] | - |
| HardenedBSD | devel/apr1 by name | 1.7.6.1.6.3 newest | no data | - | [email protected] | - |
| GhostBSD | devel/apr1 by name | 1.7.6.1.6.3 newest | no data | - | [email protected] | - |
| OPNsense | devel/apr1 by name | 1.7.6.1.6.3 newest | no data | - | [email protected] | - |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/unimrcp-apr && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Required by 2
Known vulnerabilities 3
- apr: out-of-bounds-read (CVE-2017-12613)
- apr: out-of-bounds-write (CVE-2022-24963)
- apr: privilege-escalation (CVE-2023-49582)
2 NetBSD ports depend on it, directly or through others, and may carry the vulnerable code. The ports that need it