-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 09 Aug 2026 18:26:22 +0200
Source: apr-util
Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym
Architecture: riscv64
Version: 1.6.3-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-01) <buildd_riscv64-rv-manda-01@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver
 libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver
 libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver
 libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver
 libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers
 libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver
 libaprutil1t64 - Apache Portable Runtime Utility Library
Closes: 1143837
Changes:
 apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload on behalf of Apache Team.
     (Closes: #1143837)
   * Fix CVE-2025-49506:
     Function apr_password_validate() was not constant-time with
     regards to hashes or passwords comparisons, potentially leaking
     their content via a side channel timing attack.
   * Fix CVE-2026-32327:
     A stack recursion attack against any library consumer
     which parses XML from untrusted sources and uses the
     apr_xml_quote_elem() function
   * Fix CVE-2026-34191:
     Improper Neutralization of Special Elements used
     in an SQL Command (SQL Injection) vulnerability
     in Apache Portable Runtime Utility via apr_dbd_oracle provider.
   * Fix CVE-2026-34501:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility redis client.
   * Fix CVE-2026-34502:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility memcached client
Checksums-Sha1:
 82548da06f2fd998e9bb79683acbbbe222caad1e 11602 apr-util_1.6.3-3+deb13u1_riscv64-buildd.buildinfo
 c677768d2bd772c57aad2bf564b43c5fd8629873 30264 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 aa7ae6aa1dbfeed9848c819ed1f5bf8ea972c7bd 15952 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_riscv64.deb
 d34e6abae2112cd2f558b7a68f5bfe9f9b68aba4 30040 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 ac170c0e7ba200a21c4daa9a89131a6d3b42b956 20052 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_riscv64.deb
 a7441dded50ff633b538728df810c45bdf3dcf7d 21796 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 33bcb2ed4791ec7558eef3649a2355c659308609 15888 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_riscv64.deb
 5fffdcf0373f195473d6f36238e2d109285e2901 16432 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 0b6cc3633c8418a9926631eb982c67570a7396be 14348 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_riscv64.deb
 ba7de6e888d2036b2dcd80631631be86ad908e56 520044 libaprutil1-dev_1.6.3-3+deb13u1_riscv64.deb
 c298ada2fe0ba8c1eec0342d1784308593921f15 10572 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 df34926395b88879aa60fa6b867205bfeb8daf02 12548 libaprutil1-ldap_1.6.3-3+deb13u1_riscv64.deb
 f936fede67107422b879eebb0f99cd7da163793c 251648 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 63befdeb90c109784c10f0b2b730d27783a26690 93876 libaprutil1t64_1.6.3-3+deb13u1_riscv64.deb
Checksums-Sha256:
 de8b6c93ead82ee43117e0aa0c941f700a2c790efc7a930ea69acee82eb14709 11602 apr-util_1.6.3-3+deb13u1_riscv64-buildd.buildinfo
 5bf74c61075e414277a53ddff5e13b33f7e0c47bd41e1651eea3997f53fc1ff9 30264 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 4653a6db20a3675956032ced6f768db52c0a849f27481d73137e388d814fd28e 15952 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_riscv64.deb
 bed53faeff66fc0817dcb23d7c303c3d6d3d6e80b895d853d22a90e7c5546a8c 30040 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 77903d765ebbe94493176570218884bf92ef60942a01676cdd5f695c1dec30f1 20052 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_riscv64.deb
 34d35ec535d9523adcce335d067f0f1adc9a0ddd3e085c0978358e7ed0e9bc0e 21796 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 abdf424cc07ecd9478f427d3fd976dbd515f0df04ac148cddca92530d20a7a42 15888 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_riscv64.deb
 c827faf8ee97852972f9648242eed43b9fa317952f2b7bfa69f94dd24a1a9e7a 16432 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 9d5748f58c4f677861dafa4a3f30baa18dc5fcde6297cfa5ec4c60052476f171 14348 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_riscv64.deb
 5ec05d43ceba15aa1c31d9c83bb11f73321b2c3d4e7a584e1682547844720ea0 520044 libaprutil1-dev_1.6.3-3+deb13u1_riscv64.deb
 3e536a9c2a397dc112177f502ee6cfd4894f65211f0c4c7dafcb5342e4f68c18 10572 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 8fe17069cc5fbb6ca505489e1c0a930cbfca0e7b1783812255890d5ec8323e9f 12548 libaprutil1-ldap_1.6.3-3+deb13u1_riscv64.deb
 adef0eac15db41a220c2073da1a8acb54b7b87c0ffc6fe8e77a6e5bb6efb5060 251648 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 ac7594e54b3c07da7dfb55de87552a21454ba13e83e31565d74946e5a2a85f45 93876 libaprutil1t64_1.6.3-3+deb13u1_riscv64.deb
Files:
 4ed81110b00623be0b8b5d59d858c6b2 11602 libs optional apr-util_1.6.3-3+deb13u1_riscv64-buildd.buildinfo
 69972486668f235672c75a58fc536da4 30264 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 4374ab7a3c71faf8ae853324b0e46898 15952 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_riscv64.deb
 715d30dce432cba1375fa539467a77f0 30040 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 fcc95c38a17716e37d4b51150687472d 20052 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_riscv64.deb
 ed8aaf8e1379cede833f6bcf88648c90 21796 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 04c8e717daee9c1407ca111bf9a53ff9 15888 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_riscv64.deb
 49c532ef4f16326aeba1557a2c3fbcdf 16432 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 742da4f9c70486976923e76211f2f9cc 14348 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_riscv64.deb
 cf42038ddaf8c5056ba2ca5591d86ba7 520044 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_riscv64.deb
 0a85768379f3f033fbb7298448f66d1f 10572 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 eae11376e230776313f0db3a0db80e45 12548 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_riscv64.deb
 2d0cae66757eec7ea5a66b6d9658fb1f 251648 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_riscv64.deb
 fd75c875e5d7175fb8910c9754a6fe7d 93876 libs optional libaprutil1t64_1.6.3-3+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEwN+C+Bc8deN4UliX50ghctvtZFQFAmp8qOEACgkQ50ghctvt
ZFT2hw//Sy/Yq1VOokOBj5xnqx8DO7cbjb6aFQ31zQ9q0VOrhIMjbzBW5VKHhB8i
VzXPSg7O/vh/ScQJ5q4RWgE9+uQ/R6Tcyowx4C4xjtxjXLTgAKPbM0COG2v47Jmn
EoXCsVbeLeIJ4vzRNt9DJRnIdEJV+XemUiRaUA3o6UiwjM/JYBYVC0lOG9J1AM1R
vdr44NaJJXctwwkTJOgRKnbka6667LhNS/1RE2kAz+n0DrrqCvOUmYiOcIcnS+YB
XRNG+IknqaARDUnoZ16B210vlUkEv6hRpwJ6HM75Xn6MGZpWm7YOBtlql3uFZj6T
hy4kCB4xiLToSwR2JdJPf9KhW4uGRl462sHRQp3Bi4Vc8SV/be+jWrk0i7aJ39OA
6FrbTerOwGHz/tbc3rfTC3pmbq8d8CHywghKBc08cXHSMeRWwgedVDzhmkkANUlO
DfQS11U45qYs1h2Zs5huDcmAgEu8ZKMGGp2Y/UiA41zIUCBis+YGgpxeIzgF61pJ
HdxlgSIA8gxpgFO7ghwUy1eE+KkEaojC2nbAayttfwBjOzpXyMKu0RFMHablFK40
x5IL0AKqRI5OxI68h8CtXsKgsrS9eyNYL1rwbZFN4fezNgfhT9noTOZERZ5EJIR9
AhGsRWgU2BJKnObvWNY3WHEgAdo5j0Llr9YvIt63wPB9GmGi2HM=
=24FX
-----END PGP SIGNATURE-----