-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 09 Aug 2026 18:26:22 +0200
Source: apr-util
Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym
Architecture: armhf
Version: 1.6.3-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver
 libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver
 libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver
 libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver
 libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers
 libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver
 libaprutil1t64 - Apache Portable Runtime Utility Library
Closes: 1143837
Changes:
 apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload on behalf of Apache Team.
     (Closes: #1143837)
   * Fix CVE-2025-49506:
     Function apr_password_validate() was not constant-time with
     regards to hashes or passwords comparisons, potentially leaking
     their content via a side channel timing attack.
   * Fix CVE-2026-32327:
     A stack recursion attack against any library consumer
     which parses XML from untrusted sources and uses the
     apr_xml_quote_elem() function
   * Fix CVE-2026-34191:
     Improper Neutralization of Special Elements used
     in an SQL Command (SQL Injection) vulnerability
     in Apache Portable Runtime Utility via apr_dbd_oracle provider.
   * Fix CVE-2026-34501:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility redis client.
   * Fix CVE-2026-34502:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility memcached client
Checksums-Sha1:
 082c0127265f8fd4ea277d5af8cfeaf83d0d3ded 11458 apr-util_1.6.3-3+deb13u1_armhf-buildd.buildinfo
 d0c7fed4f7147310247aeb39f5ea5d5f1a317e09 30240 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_armhf.deb
 06cac59247a2a430d6706f6b8b268eb866c9e832 14336 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_armhf.deb
 730d7102189f2ef172588155351f5961da1f4927 29764 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_armhf.deb
 18a047f20e5d8d541d36bc2b20e48f65ad7c1534 18052 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_armhf.deb
 334ddd22f60bd024706cd4d6ae59c9e658597cd1 22012 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_armhf.deb
 791aa6a4fc4b5f2d5ffc613cb5ef21f0b011a693 14228 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_armhf.deb
 254ed93ceb11bd785bae3efaf858f4564e2efb49 16700 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_armhf.deb
 7c6f3cf90ac212a855f357b72220a9e4c707b5e3 13016 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_armhf.deb
 82205197944d266c0a05904336617a2d5b273b1b 407784 libaprutil1-dev_1.6.3-3+deb13u1_armhf.deb
 6746c6be91ab1f67b1e4bf2271db6c4a461f8a07 10792 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_armhf.deb
 d1db432d2c29685cb9c8623287fd4eebcee94d25 12048 libaprutil1-ldap_1.6.3-3+deb13u1_armhf.deb
 bf1dea0bb7168f299435cc7c13da017c7aed367e 268124 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_armhf.deb
 c4ab2789d74e5e776aae1ae4813b41ea40aa8cb9 79224 libaprutil1t64_1.6.3-3+deb13u1_armhf.deb
Checksums-Sha256:
 7e69eb9bd7f0fc4d0048fda39a4266d16a6e8100f6c108f7d38259ff6fe49c87 11458 apr-util_1.6.3-3+deb13u1_armhf-buildd.buildinfo
 b521d12a8ed69833c2eb584dbd10485db9061444d48e2859cb77532cad6a2172 30240 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_armhf.deb
 09c1fc4eb8c07cad4a58626ce2673325d2a5271d57c7268de25a2bc7b3d60bf2 14336 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_armhf.deb
 d38974e5584c36c67b84254cdcf7afc470f9449b937cb2bdff0443387bd1c198 29764 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_armhf.deb
 ca1d7135b1129dc6dbe30151127c027cf9894db54600199dca65bdfdbd929e4b 18052 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_armhf.deb
 6ca95fd0b93baa2bf550c60d4d3acffa79f7dabc37b92fc7e06bb6fa60f41478 22012 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_armhf.deb
 a4a94a6e4c4c3f52bc9de790ad66ff8849de939d2e74306da4fe372c9b463921 14228 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_armhf.deb
 59625e2a878d6f39c7be93dd09e9f51093e5528104e046f21a3fa797bc245240 16700 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_armhf.deb
 6888b23237a0e1aef9d5c0170a325736b6f169a97f77e33f68130f3ac98c660f 13016 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_armhf.deb
 81810d77837e83322f5cb3c9f42b0bf8a74ab30a953d40ee1bf3609a31b9fc34 407784 libaprutil1-dev_1.6.3-3+deb13u1_armhf.deb
 4c54adf07d602a27e2b8152cf3f03d4abc02e6fb81f7a3fcadb315ec8758fa60 10792 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_armhf.deb
 89a6b67b7ccd87a0652804eaa84efe6e108e0812804f369678ea5c239eb7f64e 12048 libaprutil1-ldap_1.6.3-3+deb13u1_armhf.deb
 7aea9eab617c6042839bf902efc47433eeebb1cfeaaed348eae01035d570eac6 268124 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_armhf.deb
 0fc764d577cdf6038811a2540bfb99051d5a4d2db32950bb3229e2112a5b174a 79224 libaprutil1t64_1.6.3-3+deb13u1_armhf.deb
Files:
 17c0dd15c7ab53eead25975dc53c4b00 11458 libs optional apr-util_1.6.3-3+deb13u1_armhf-buildd.buildinfo
 4123f0c6816cfc442e445ef17eb49836 30240 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_armhf.deb
 0c0686ccd06f6f34bf3d1409d36a6477 14336 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_armhf.deb
 2b7b7e0545a27dbfd02bb20f8cc7b980 29764 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_armhf.deb
 96ea9ac327b4de5f9708b0c524110560 18052 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_armhf.deb
 ea5dacef4cced669051ae9bf1d8cc889 22012 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_armhf.deb
 d92eab5e78df1196fa2b5f92c771d154 14228 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_armhf.deb
 5fe4524a184fae3defcb435341dadfbe 16700 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_armhf.deb
 7e730a903fb8516e8011326d91a66e58 13016 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_armhf.deb
 1c668024f3723705080b6870ca340e1c 407784 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_armhf.deb
 bb3a70444e1454879df0d0dbfda110ec 10792 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_armhf.deb
 919b87fed8407def898af7d769ac173e 12048 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_armhf.deb
 852bd3404f487579f257aa388678fe88 268124 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_armhf.deb
 6fa3680536f21803b8f922ff010408b9 79224 libs optional libaprutil1t64_1.6.3-3+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=MjSC
-----END PGP SIGNATURE-----