-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 09 Aug 2026 18:26:22 +0200
Source: apr-util
Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym
Architecture: arm64
Version: 1.6.3-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver
 libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver
 libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver
 libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver
 libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers
 libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver
 libaprutil1t64 - Apache Portable Runtime Utility Library
Closes: 1143837
Changes:
 apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload on behalf of Apache Team.
     (Closes: #1143837)
   * Fix CVE-2025-49506:
     Function apr_password_validate() was not constant-time with
     regards to hashes or passwords comparisons, potentially leaking
     their content via a side channel timing attack.
   * Fix CVE-2026-32327:
     A stack recursion attack against any library consumer
     which parses XML from untrusted sources and uses the
     apr_xml_quote_elem() function
   * Fix CVE-2026-34191:
     Improper Neutralization of Special Elements used
     in an SQL Command (SQL Injection) vulnerability
     in Apache Portable Runtime Utility via apr_dbd_oracle provider.
   * Fix CVE-2026-34501:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility redis client.
   * Fix CVE-2026-34502:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility memcached client
Checksums-Sha1:
 a91acf4a5e1e4bcaf6c706389229866e09510c94 11576 apr-util_1.6.3-3+deb13u1_arm64-buildd.buildinfo
 87a52bd79432333ec47d0f621850cee50cf8218c 31336 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_arm64.deb
 867519e079ebf4a8a781a524713a39d7f4fb9564 16120 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_arm64.deb
 d23e28a5adf2f3c68dfde30ed002281af092bd2b 31164 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_arm64.deb
 c770f29d5f8f7d71c54f6203d5e72f0a7b1113a8 19736 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_arm64.deb
 45238cd5c6a023f24a7bdd2efbae8f6e1de0f36d 23916 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_arm64.deb
 6e90bd51656c2ec6888f4dec542ded2eac90ecd9 15768 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_arm64.deb
 098da6fc21a5f9603ae160eca713affed4547ee2 17316 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_arm64.deb
 24c3d4ce0becc09ecf254e24fef7b6332fe299da 14432 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_arm64.deb
 5453f1329693422f948a319cd2e22e2f33e924c4 416032 libaprutil1-dev_1.6.3-3+deb13u1_arm64.deb
 9dc34b3d56d6b1eb850d2bb549c4675d476c27c2 10720 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_arm64.deb
 63d99ed8733f3d7b76bd4a8024017d95a574a127 12584 libaprutil1-ldap_1.6.3-3+deb13u1_arm64.deb
 c8abf6a98aa4364bda78b2bde10960bd500917ab 261472 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_arm64.deb
 8bda266aa2026c9216757239a1f13b18cd5ca0ff 86820 libaprutil1t64_1.6.3-3+deb13u1_arm64.deb
Checksums-Sha256:
 6fa875f2561ead809fae793fd51f35873d0ba3f93797bf516e6c1d875d945904 11576 apr-util_1.6.3-3+deb13u1_arm64-buildd.buildinfo
 399897acd7abf38e89709cd1effb39b40dd52691c1e44a72d77642aeb2a6ea0d 31336 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_arm64.deb
 3ae3fae41f999e54f2320f0dc65541e437c76075d1648e703789db28d374fb9e 16120 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_arm64.deb
 6eefc9210f59ab9cdc1535c6e8e3ea817588c57383adcbc5635f3af464a77558 31164 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_arm64.deb
 233323d28f707d634bedcb513ad7588e58f0ad3f8fb17043e1b9b4d36a5b96b0 19736 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_arm64.deb
 3e7e2bc790b4e30b32cc6c27a73c83aa3abf0db44bb0adc6e69a49336b9fb506 23916 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_arm64.deb
 fd4bc28e4e7ffc4cbd171c705b629dcb2f54ddaa81c0e2814ca91acd6b10faaa 15768 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_arm64.deb
 1799deef20e67f6a5c79c76d9386d4f8b8972ea9cf88b305a7b2a4d1962e88fa 17316 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_arm64.deb
 2e40d756a9d56c728b8b29eb9e3f739fcde6f9c9b4fbaaa77d14957d4d19fca7 14432 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_arm64.deb
 abc0b4e18297151caa72c18f3a542ce73f3af5a7a4f866843f7e072109ed3a22 416032 libaprutil1-dev_1.6.3-3+deb13u1_arm64.deb
 84c425adf224778526491eb27dcfb959a8083058e51951141e583c727bcb04a6 10720 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_arm64.deb
 728ff1732a5ee5764ccfd01935b3a7ff2fd85151bc0d421ce6d0d969fbc8cff7 12584 libaprutil1-ldap_1.6.3-3+deb13u1_arm64.deb
 a8768df13360555f9b0c3d8af73c6942767c8cee9aa1c607dc92929e118631bd 261472 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_arm64.deb
 e2d2cb51d4341afe3501db92a7d13d0cc7a45203da78665027b2b4617551b6db 86820 libaprutil1t64_1.6.3-3+deb13u1_arm64.deb
Files:
 45e33e97fc1e0094cabd12970b39ea87 11576 libs optional apr-util_1.6.3-3+deb13u1_arm64-buildd.buildinfo
 8d9532968b1539236a0071776d236f58 31336 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_arm64.deb
 f7e3e6c01c5e728f22c20fc51df7b4a9 16120 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_arm64.deb
 8dcf85ebc4bc49723444f759c56c718b 31164 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_arm64.deb
 5d5079f862ff2e4a671f508942875e89 19736 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_arm64.deb
 60cfc37be65670a5765075ed69043a13 23916 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_arm64.deb
 3ca84f957802b2852a469936e71fa3c8 15768 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_arm64.deb
 76389e0e5e577b3d04409a6bb2d1e674 17316 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_arm64.deb
 8cc826852db6280c648ea82cca2d2d8d 14432 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_arm64.deb
 70034d031d62c10a669c2afc41f79e5c 416032 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_arm64.deb
 47dd8e412b79d68c5a6f04d1fb4e7069 10720 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_arm64.deb
 d99e61ca838cb74260f142b14ed1bd06 12584 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_arm64.deb
 cb05efd9fdb2a4c468260b161774e84a 261472 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_arm64.deb
 59d26e319bf6eb4ff8a7d39403efa3e1 86820 libs optional libaprutil1t64_1.6.3-3+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=C1zf
-----END PGP SIGNATURE-----