-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 09 Aug 2026 18:26:22 +0200
Source: apr-util
Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym
Architecture: amd64
Version: 1.6.3-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver
 libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver
 libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver
 libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver
 libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers
 libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver
 libaprutil1t64 - Apache Portable Runtime Utility Library
Closes: 1143837
Changes:
 apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload on behalf of Apache Team.
     (Closes: #1143837)
   * Fix CVE-2025-49506:
     Function apr_password_validate() was not constant-time with
     regards to hashes or passwords comparisons, potentially leaking
     their content via a side channel timing attack.
   * Fix CVE-2026-32327:
     A stack recursion attack against any library consumer
     which parses XML from untrusted sources and uses the
     apr_xml_quote_elem() function
   * Fix CVE-2026-34191:
     Improper Neutralization of Special Elements used
     in an SQL Command (SQL Injection) vulnerability
     in Apache Portable Runtime Utility via apr_dbd_oracle provider.
   * Fix CVE-2026-34501:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility redis client.
   * Fix CVE-2026-34502:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility memcached client
Checksums-Sha1:
 3f8daac51ad9b82ea313a289c26be47ebb17fa29 11592 apr-util_1.6.3-3+deb13u1_amd64-buildd.buildinfo
 b3b08e902ef6fb2a08fabf816625e730a02ec3f5 30804 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_amd64.deb
 0c134ba64deebae90ba4e9e245424f372c47eb8a 16240 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_amd64.deb
 c752364dcc833e3241b5feb65d139593081ee4b3 30404 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_amd64.deb
 7ce2f78fe44e37abdf45e4fbb69a4ca52d0f272d 20060 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_amd64.deb
 3fdfe22adf57aab2d830ee341a9c98fe4e60820a 22764 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_amd64.deb
 478bd87c630911ab948731b8e754283350570a23 16064 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_amd64.deb
 458fd2abd40730eaf49842360d888df212bf770b 16684 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_amd64.deb
 67175f7e8699b78c957639617fad3b411a754628 14376 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_amd64.deb
 f338f6a06bf469202cfd80cdaf7f74eeff5911b3 415808 libaprutil1-dev_1.6.3-3+deb13u1_amd64.deb
 13d2a7f8d5f53d029f6e340399ce7040abe32909 10560 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_amd64.deb
 344f8f7079b917dbbf3bfa8b9242e4b410e616bd 12512 libaprutil1-ldap_1.6.3-3+deb13u1_amd64.deb
 6092856ccda59462eda87e455490f5e30710ec7b 264904 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_amd64.deb
 236172740a7bb306785fdc2f450a2e55d2c4f160 90228 libaprutil1t64_1.6.3-3+deb13u1_amd64.deb
Checksums-Sha256:
 ed45694244480ebe785bbf2c63aa4227cd38579bf48ba4757d8a3a94f55ef9b2 11592 apr-util_1.6.3-3+deb13u1_amd64-buildd.buildinfo
 8f97dba5a31952410b8f996fe8d2674d9baefee8714964e41bbc1d5243a820b2 30804 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_amd64.deb
 ff0fdf4f13fdf340238ba65c8f0b679e06aaff60154a20eaed234dec9a24bc85 16240 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_amd64.deb
 0097e17337b0be56569f10c997b2baed2944616533d663784ade32ee6ef88801 30404 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_amd64.deb
 cabeae44769a3d4f90eef2dffa26bb738c959c136a5bd40af8e716fb7d980d40 20060 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_amd64.deb
 518fbadfd84339d112fda5f1b8b5620873a94e88b2112e774764bd45ad6ba434 22764 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_amd64.deb
 389c1c5b470af06dafb1b3e25a530af5a67002f368f495b728d7f7577893b005 16064 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_amd64.deb
 62caf2de5f0f84b4032b3867c2be315b87bd5092e747b53ae5c940f911421366 16684 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_amd64.deb
 22fbd51277b23a95e37c09e002ae73caaf8d0f98b5856773e9cf8ec6080bcaee 14376 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_amd64.deb
 43f3a839ef08ef7e62e8a56eda086c134996a3f43eeea2b18edf745d0eafe451 415808 libaprutil1-dev_1.6.3-3+deb13u1_amd64.deb
 d542d02f2135cb027bed12f08e26f00a031713cc4d58fc0f37833afa38f2daad 10560 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_amd64.deb
 0343ba0870afbec89442307324c4bfa5b68933530ffcd62976d4ccd7f4d27b2a 12512 libaprutil1-ldap_1.6.3-3+deb13u1_amd64.deb
 bff9fe0e47a308e0e8992df282f155c83d3bca334ea52687ab759638c3cd78d5 264904 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_amd64.deb
 3942c90183043c2bfd461f7ced5a535537cb4428cb7f134c279e95df45403572 90228 libaprutil1t64_1.6.3-3+deb13u1_amd64.deb
Files:
 069f51358373802b498c4cecff81b671 11592 libs optional apr-util_1.6.3-3+deb13u1_amd64-buildd.buildinfo
 e36ae89a02c51fcb86c1f1358bf3cd37 30804 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_amd64.deb
 61c9ccefef5f91d861d16de114b07631 16240 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_amd64.deb
 12dbf0e35fb26ee4c93445b3ab3c7146 30404 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_amd64.deb
 b2ecad81d83f78aaffe19f9bf2f21fc7 20060 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_amd64.deb
 8ebc9c3e141a8ec49fe158a0b2ff260f 22764 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_amd64.deb
 92febf798482e67f3862c0165620fa9b 16064 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_amd64.deb
 53d7646d0d40bdb58318db3d8130d751 16684 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_amd64.deb
 c495c1bb6efc58a7bac76948da40ca6a 14376 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_amd64.deb
 4060857d730cabba9d7486059fe7d039 415808 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_amd64.deb
 f9826ebb22ec56a60e00bbaac50733b9 10560 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_amd64.deb
 09fb0bc593709bfe11a2eb322ef3d03d 12512 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_amd64.deb
 edfe7887c6643327e4d935f148cedbd1 264904 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_amd64.deb
 dc094a01c96c9fe82561bd9795d13a41 90228 libs optional libaprutil1t64_1.6.3-3+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmp8hqUACgkQYg9P9sm2
dfFs2Q//fE1Lf2j2ok0tfrP7zUAWScuFDZJKB2sOE7aQA7SeslCzriJ7UdwIZJ0N
wkhJOJtR826Q6icZmkwjXvu5tm6qvR91Otocg5epjyqoBIEGXdYqbJe5UBiTfRF4
kh1/OaXlB8BtWUI1+kXKwmkTRWqqnZpTarz0a/uhOzy3hJPCEKGVDoMiYzAMh02X
BWnHHqyhR9yXY61FshYC7jsRKe0EM78gIZqXs/YeHP8vJK7Aykp4Edjk9jo5Y2bu
T1830bZMf/lpMQjeG6ryzMYcdm56WX3Hx7dgSW6xneLEwWL0zaQLIYqzfl7lmeC/
Wsc6we+Y5XhCuG3g4iSb8D8sxDTD8nCvPbYFWHYXmVboxTCxmU+vDkR5/GZ1zJw8
5/cuJ+yp2If0YGNccaNtPXn6ROk0dohtAkjPkr1qBO+5YdRkX3W5Hn5O6XpmIA+h
5uM8mhkZxli+HAjXCGMse12hx4vwzCMLTDX2Kl2WODhrpw3ZBko5hBToORll2/fj
SDgiLQpjWs2nHd+mLTknCVcP4TLAmAtVuDGf4uy6g/fpTctopGE36hYOzH0szy7h
LVUW+d8qWsbyOhdxCPIFVmy7aRUkKcV2tYJ0TXbPWRxlN+9KLlSPPCbtV5DltW/4
EYqbUXjDSi4OmNPdL/fNf/lZ/Ek8i+XlHmPTlgskZWFQV4SAQ2M=
=tVvR
-----END PGP SIGNATURE-----