-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 09 Aug 2026 18:26:22 +0200
Source: apr-util
Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym
Architecture: i386
Version: 1.6.3-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver
 libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver
 libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver
 libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver
 libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers
 libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver
 libaprutil1t64 - Apache Portable Runtime Utility Library
Closes: 1143837
Changes:
 apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload on behalf of Apache Team.
     (Closes: #1143837)
   * Fix CVE-2025-49506:
     Function apr_password_validate() was not constant-time with
     regards to hashes or passwords comparisons, potentially leaking
     their content via a side channel timing attack.
   * Fix CVE-2026-32327:
     A stack recursion attack against any library consumer
     which parses XML from untrusted sources and uses the
     apr_xml_quote_elem() function
   * Fix CVE-2026-34191:
     Improper Neutralization of Special Elements used
     in an SQL Command (SQL Injection) vulnerability
     in Apache Portable Runtime Utility via apr_dbd_oracle provider.
   * Fix CVE-2026-34501:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility redis client.
   * Fix CVE-2026-34502:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility memcached client
Checksums-Sha1:
 a0bb76a66b6fae0b925f755577dd531f41416c4e 11457 apr-util_1.6.3-3+deb13u1_i386-buildd.buildinfo
 807e67473f6bc5a863e69a93d1ac3c9b3adf8d4e 28060 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_i386.deb
 935560b0ec7cdee1c43ead1ec998ddad0cd2b924 16432 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_i386.deb
 f9295572e32f29ccac09230e533bddce9b80ec55 25916 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_i386.deb
 4c791548cf8deb31e9a5e3ca36fb637672e2cc53 20704 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_i386.deb
 785ee2345aa4e75e14fa882d4e832776bf7d1ae4 20052 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_i386.deb
 1e89ed5dab9d3283f3f0e61bf6184954a2c3e66e 16736 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_i386.deb
 a9333cd24a78e9d378c4b92db391b24a56e6e042 15280 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_i386.deb
 ad29bc55b1cf3760abdeccfe8f0243b94454dab5 14692 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_i386.deb
 8c75d83d153823a8eda4626fca18a0f862ca8cb6 424404 libaprutil1-dev_1.6.3-3+deb13u1_i386.deb
 a1c9bdb060eadb3b319741e9834e11216359d928 9344 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_i386.deb
 8c696be51f184494b70c95f4bdd86882bef521d0 12652 libaprutil1-ldap_1.6.3-3+deb13u1_i386.deb
 3a04b55644e6b2136a02c62eb55aec76551b661f 237000 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_i386.deb
 7fd51b98579ce572e8e417a2503639e982006744 96744 libaprutil1t64_1.6.3-3+deb13u1_i386.deb
Checksums-Sha256:
 1ed14e8f2556e69b8a06d13ff44be1c728bde7d91a41bec9b4dd2bcd7e3da382 11457 apr-util_1.6.3-3+deb13u1_i386-buildd.buildinfo
 161c0059a590aa2c49c2a82fbb8c24242d8245aa20d215f7c0ab2e86db054d0b 28060 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_i386.deb
 7dd948c604573371f20bd126479adc8005b261fea07b8acee8e8971bff9d472c 16432 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_i386.deb
 d31877c739c38e36c851df27c39f037ea28519605de419bd4f6a1fc2f581042d 25916 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_i386.deb
 89fde184443f1ecb380fbba1d26f99937f54cee9cb83bf3a0936fd005213bb09 20704 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_i386.deb
 8365ac353ac2e802e5bdae92cb1bc87af52bb1c634eba824cce39e9678f715f4 20052 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_i386.deb
 79270c63c47e6a014897a68977edf261903742fd6665f6d1834572f7e700a8d3 16736 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_i386.deb
 eddc9ef925f7d5d3d126abca811738d7cc2ce6bd8f6353f7e3958c4aca952b83 15280 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_i386.deb
 04d8e545a25c1c8e0313ac95b1bd125c9078a10a1c45ecd07a3ad14c50bffcd3 14692 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_i386.deb
 2957418379555a55e626eb2535e89e65c33a724b0605550bcc1a579f5f313a2a 424404 libaprutil1-dev_1.6.3-3+deb13u1_i386.deb
 64838dba1e175978c2c1969be492552a501df2811e72656073427a612a876f3d 9344 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_i386.deb
 a1c869373cadf87370a36947b66d74f30470a0837dc5d3f635ddc237a3d71810 12652 libaprutil1-ldap_1.6.3-3+deb13u1_i386.deb
 5d120d550f20d4acd6f09fcc50a752f8df0c3e09d0a0e6e73f35fc4d7bbcb79e 237000 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_i386.deb
 50e1d93075232d0e12ff1b14a246bc0c6647cbf979bb4c981e443a6b066ac738 96744 libaprutil1t64_1.6.3-3+deb13u1_i386.deb
Files:
 509722a07ae7f7b7a4defafffbf68fe7 11457 libs optional apr-util_1.6.3-3+deb13u1_i386-buildd.buildinfo
 bbe7ccd38b3a8060255f0d503afee6b2 28060 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_i386.deb
 76693ea94c783491b327064ec95e571d 16432 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_i386.deb
 875582516cbe7dabc31bc709537b9b55 25916 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_i386.deb
 164b46720647b9becb839b9c2451a800 20704 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_i386.deb
 8727362efa1032f3aefd79dbadbfe9bc 20052 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_i386.deb
 9c75628bad596c7d62fb6d2618dc1f34 16736 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_i386.deb
 f71bc13760905bdbc827b61cdb1d33e9 15280 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_i386.deb
 c6bdb723df8be623218b78c17da32563 14692 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_i386.deb
 fb86e749376b43069b2dd780702d76d0 424404 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_i386.deb
 5746442b2329af9e2e9a6be99534fb14 9344 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_i386.deb
 9e1cfe798afadb0a6f5942e897ae7c96 12652 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_i386.deb
 3debdcd5d8d4d5ca2ea318c7f7fb5f82 237000 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_i386.deb
 a122b8b6509bd36270e18efb3f897ca2 96744 libs optional libaprutil1t64_1.6.3-3+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=fV1a
-----END PGP SIGNATURE-----