-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 09 Aug 2026 18:26:22 +0200
Source: apr-util
Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym
Architecture: armel
Version: 1.6.3-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver
 libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver
 libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver
 libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver
 libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers
 libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver
 libaprutil1t64 - Apache Portable Runtime Utility Library
Closes: 1143837
Changes:
 apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload on behalf of Apache Team.
     (Closes: #1143837)
   * Fix CVE-2025-49506:
     Function apr_password_validate() was not constant-time with
     regards to hashes or passwords comparisons, potentially leaking
     their content via a side channel timing attack.
   * Fix CVE-2026-32327:
     A stack recursion attack against any library consumer
     which parses XML from untrusted sources and uses the
     apr_xml_quote_elem() function
   * Fix CVE-2026-34191:
     Improper Neutralization of Special Elements used
     in an SQL Command (SQL Injection) vulnerability
     in Apache Portable Runtime Utility via apr_dbd_oracle provider.
   * Fix CVE-2026-34501:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility redis client.
   * Fix CVE-2026-34502:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility memcached client
Checksums-Sha1:
 a08d8925bd7917a4fa388487d18796f6e06bf794 11444 apr-util_1.6.3-3+deb13u1_armel-buildd.buildinfo
 4495adcf3f2d051d4a668825ea6ef9b38aee74c5 30008 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_armel.deb
 a4f96d691c4f16cc76a576082b0773d84c55d16e 14544 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_armel.deb
 ea8b059c8f67c66c0761e2912474bf658553ba8f 29404 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_armel.deb
 b369b30a978758646a4eaf944267f71929bf29ae 18264 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_armel.deb
 b73c03a6a101c37f21b529fd4fd63b436b5b2910 21964 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_armel.deb
 d4490ae2e1188ccb50356669f34496e6abf0c37d 14968 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_armel.deb
 34f69eb3954116f491a51edb1e27d06cafe3d555 16696 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_armel.deb
 ecd51d70beb9936421a57ff97b09ffeb59a2cc70 13824 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_armel.deb
 baffc473a516cacddd8ee759dbbeac1b2f78d856 407628 libaprutil1-dev_1.6.3-3+deb13u1_armel.deb
 75b3113570f746411a620e26a9dceb8bfe6c3720 10728 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_armel.deb
 7e20c346f59014b50b6e49cf14310705c363394f 12096 libaprutil1-ldap_1.6.3-3+deb13u1_armel.deb
 6c7b471cc8df61c947a8fcbd1a91fad1231712ae 264032 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_armel.deb
 630d4b68df9bce34e3e02e16d895e842886cb877 78080 libaprutil1t64_1.6.3-3+deb13u1_armel.deb
Checksums-Sha256:
 12731ac74e81c9ad16f20191017a1035ea08cca0e82dbe3d59b61eb5ad3b3835 11444 apr-util_1.6.3-3+deb13u1_armel-buildd.buildinfo
 290ce76245038fa6bc08d57ca595e6be21539894ff82f596a8bbf6afc3d5a2f9 30008 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_armel.deb
 df41ccbaccafc95acfe2087906c5733a6a7c02d0165ce1d2faea6d061eee2e41 14544 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_armel.deb
 d0e9737e5390150b40f95806092d9ec4453a9d5c455e5698cf341eba41748476 29404 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_armel.deb
 2032334a4c813fbb4851705a766ff6e0291040f33fec3b9d5c0979a253ccdba6 18264 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_armel.deb
 a856642c4c46bfd1ac1aa470e61d7e58e255c189afeffa99c802edf8cf176f7c 21964 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_armel.deb
 a92d0048a155866e1b050dcb09641c20483ae8b74b4d09740cb0cad5091c8bfa 14968 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_armel.deb
 a6eaf21bf2a8209645e6614201601400272bd7cbfcd58e9acda19e5d285c0754 16696 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_armel.deb
 9112905a35377ef3954e9e1e6905c0303d3bba3465d50edf8841042b69844096 13824 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_armel.deb
 c8943a3b0165dd37827f63e45c2b7c2e0115215a5a940ae1082fa4801e5bf0db 407628 libaprutil1-dev_1.6.3-3+deb13u1_armel.deb
 ffb930a12cd7772dd7f26e2a6d6104bcba12b3200040600ab253d57b4403ef71 10728 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_armel.deb
 1b6082ce1a6119b1674de4c3ca1ac21b1d7b842461503527c5638e80d374a785 12096 libaprutil1-ldap_1.6.3-3+deb13u1_armel.deb
 c7bd8c2ed3a04d81041297eb602c75347706ededf2043a7f25a723275ffef19c 264032 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_armel.deb
 5c509c1b0017ceccbcde0e305f5f20d88662fe76931ab3ba1e19fd85034f1f68 78080 libaprutil1t64_1.6.3-3+deb13u1_armel.deb
Files:
 6e657ca5c635c9b74f79681424de130f 11444 libs optional apr-util_1.6.3-3+deb13u1_armel-buildd.buildinfo
 deb078103156c7c2d50bc6f1637fd75f 30008 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_armel.deb
 b2e9c92798a30c5de939a197a0744c99 14544 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_armel.deb
 bd4d322a99884bd7a237194c8a97eb84 29404 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_armel.deb
 220ffd38370c1eaa28e26684e595132f 18264 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_armel.deb
 46ef765d61286ad6964f1dc039c4c2a9 21964 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_armel.deb
 fa5eac8f5a560664a68c5adfa977ad49 14968 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_armel.deb
 a43255b2742fd73087e24c7998805db7 16696 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_armel.deb
 f58ec93cb2fcf7f1c8f39b39244bb62a 13824 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_armel.deb
 2ebc0d792ce2aac8085fe4df517a4740 407628 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_armel.deb
 128f7615596532e8b97f761793772a13 10728 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_armel.deb
 1771143c41c5fdd68dd23e39fcdc0564 12096 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_armel.deb
 0fb5133872567e61e59dc3eb29e593c7 264032 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_armel.deb
 886f452554faa93e14e00f32ac9394c0 78080 libs optional libaprutil1t64_1.6.3-3+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=lgkK
-----END PGP SIGNATURE-----