-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 09 Aug 2026 18:26:22 +0200 Source: apr-util Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym Architecture: ppc64el Version: 1.6.3-3+deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Bastien Roucariès Description: libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver libaprutil1t64 - Apache Portable Runtime Utility Library Closes: 1143837 Changes: apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high . * Non-maintainer upload on behalf of Apache Team. (Closes: #1143837) * Fix CVE-2025-49506: Function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack. * Fix CVE-2026-32327: A stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function * Fix CVE-2026-34191: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. * Fix CVE-2026-34501: Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. * Fix CVE-2026-34502: Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client Checksums-Sha1: ad9646f58044338e781d4f87eb5501388fe739be 11657 apr-util_1.6.3-3+deb13u1_ppc64el-buildd.buildinfo 643b0e84909ee95279b39eaff4ff796a26909b14 32352 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 4414e581e43d91a915dacd79c07bc9c06db6cb5d 17444 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_ppc64el.deb a0b50b4c6c4bc923d469c8f8a297d3c85231235e 31280 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_ppc64el.deb adbb0ecd0aa31a282b79ed50af9d67339b23940e 21108 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_ppc64el.deb faba9f7ccef92fca64ae6f537410d8ed5e8e334e 23900 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 3e36e1ea59ee39b8a8cf291740190ad3b42da6da 17048 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_ppc64el.deb 7d222c3dee3235d068f4e5e07f3f286b4d7817bf 17908 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 4695e18088d0edd1a3cf9a087b994c7e6c75d84a 15320 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_ppc64el.deb 8b7c8fb4fcea7987f03f8898c20c464031110486 427856 libaprutil1-dev_1.6.3-3+deb13u1_ppc64el.deb 2fcddafbd17f1f3e87eb17b94211478a04b506f8 11068 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_ppc64el.deb adead6496d5f633af471a1eab95ee6940cb70685 12892 libaprutil1-ldap_1.6.3-3+deb13u1_ppc64el.deb 7ae89de3ba63f32783101ef40bfca0194ca1adf5 267388 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 0701de42b8bac17e32ea1e7c71cc4b19a9b94799 99500 libaprutil1t64_1.6.3-3+deb13u1_ppc64el.deb Checksums-Sha256: 63aa02b4df0d3024a2be7b854f615ec7b932c951deed40a74eb3a86a9e8be4cd 11657 apr-util_1.6.3-3+deb13u1_ppc64el-buildd.buildinfo ad821d1b1dd59801359f35f9866c747d620813faa780cd295111a25019af9077 32352 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 8f7aeddac9fae532d55ee3b7effe540c9725e69314e3061c12c61a25ec2ea68b 17444 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_ppc64el.deb b4c3cb9db5dd1e62d182c61d6c5154a31abd58a78b88561545db21daada249d5 31280 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 34e8fbb93649fec85aa2e42d041728c7052d4144ffd8a1c4dcaf2098fde5136f 21108 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_ppc64el.deb 0f5d419816593e7bd948a4f29b34a95866d156e63ed52580ecb416fc5996a02f 23900 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 75df1e559ff51b64f1dd17f8b9cd2b21566b233e850b3bb304add513d428d114 17048 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_ppc64el.deb f7f6ceea4df1ca46577ba2394d1b9684696a49730c46c4653b79cf712ce25292 17908 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 05f5ed98d60f5131e62a295d3b1e5de78382a053f20b077bb7313ddf6bfe8baa 15320 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_ppc64el.deb 84e003e22a9f7509abc2503c1907310afc2a692d3abe7d1a58bb57c10403b952 427856 libaprutil1-dev_1.6.3-3+deb13u1_ppc64el.deb f43352c1d78f53f91785d8632ed36029deedcc46b912068b17d2be2e72439cfb 11068 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 16a301cf7c74519bcacdb3cf955a2926743a0edef9087db888017e0aeeae7035 12892 libaprutil1-ldap_1.6.3-3+deb13u1_ppc64el.deb f177ad1edc8b70f6bf8e462d0a5f8456c8cf2a3a49294553e05d74862817412d 267388 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 67ccd1a7e91f1e27e812db8d06ec04df4282284290f621cce992280a0909a2c3 99500 libaprutil1t64_1.6.3-3+deb13u1_ppc64el.deb Files: 0b4b4b74d83d58f5a0d8071e9e034079 11657 libs optional apr-util_1.6.3-3+deb13u1_ppc64el-buildd.buildinfo c0f6a25867a428f4fba402b10d1cda18 32352 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_ppc64el.deb bd53567fac95218b65c93bdc2f9cf85b 17444 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_ppc64el.deb 3646ffdfbab5cfc06976c5f52dfe90a0 31280 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 7924286b3fa3044c291d733bf7cd7b33 21108 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_ppc64el.deb 5d28973f3b3dac5f17e743ed8521a0d7 23900 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_ppc64el.deb fb16719bbdf8cf3ae5d37959d295acf7 17048 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_ppc64el.deb fca281d455e276c90a020c693b9bebe7 17908 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 064f1386280011dada50d431070325f6 15320 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_ppc64el.deb bfbcb339bed7d3ecf9a38ab06bc55de0 427856 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_ppc64el.deb 5324e267605efe684770a47a06f8edf9 11068 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_ppc64el.deb 8b3e1aba8a615246cc58d998d89db41e 12892 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_ppc64el.deb 18ecf031678531322982310adc7d590f 267388 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_ppc64el.deb c7462358f63ca536311f9ae1864fe6b2 99500 libs optional libaprutil1t64_1.6.3-3+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmp8hqUACgkQ2FRWNm40 e2ZHGhAAhxFSjkAIDjtNS3+uQCNVfawb/2ja3JdUWuTmdqVd2d3khuflAdKDRfaD PiqB4egabh4XEOnhO2uLWCkQ0z4dZb8N3u/LnqaKkYXYAAAK+7lRsm1VgwsB4JHb gEr5++UUJUGY+kySDWo8KQrLASw3VlxSaIOxM/PgOi3WuMaOsXxH91JvjNUCVOUK Bg8GAiGVNUW8mQT75PAMwueHfhvbxFdZbAJlyLVAqgOgHMFZzsDYE1+Nuh74Du3b ElgPPujKkxhOyq3OpjYQljdDyPY3qGoaBLgNfh6GjhwqPC67S4CVUVEQqBjw6OJU wbG2TGJs0wVAbVeDw9sqoiJMem5j+17Ilq+YSotV/DuwTNmrHh5TxzV1OvSzrtQr /2vvIPCHR4C3Jbe/2i/Y6wwu7ORa8CVoXSTzqVLbVKKqm57FE4RLlEw4KIsVmfbc kQk+FnD0UNzdVH1vSw+Oec4cvt4w5TaX1F5YfP1n0P91i/jA6ExjG0Tf/7gLS6y2 W+blmtG3682cbKw1Xyh/pJLXSYmBq6kWgySP+Z108N8Q72VcLvt1+B8xin/w0IHO M5fZhyirGSkiuJDSO4fPqnnxL8p/rZrr/3Ohua1ieblALDHMgHPq404R11S3M7C4 rQoZaaWURZR1Kyws4JhGmqEgwlSjxKjUcAJYNN1yPc9iSK+Q8vY= =rsal -----END PGP SIGNATURE-----