-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 09 Aug 2026 18:26:22 +0200
Source: apr-util
Binary: libaprutil1-dbd-mysql libaprutil1-dbd-mysql-dbgsym libaprutil1-dbd-odbc libaprutil1-dbd-odbc-dbgsym libaprutil1-dbd-pgsql libaprutil1-dbd-pgsql-dbgsym libaprutil1-dbd-sqlite3 libaprutil1-dbd-sqlite3-dbgsym libaprutil1-dev libaprutil1-ldap libaprutil1-ldap-dbgsym libaprutil1t64 libaprutil1t64-dbgsym
Architecture: s390x
Version: 1.6.3-3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libaprutil1-dbd-mysql - Apache Portable Runtime Utility Library - MySQL Driver
 libaprutil1-dbd-odbc - Apache Portable Runtime Utility Library - ODBC Driver
 libaprutil1-dbd-pgsql - Apache Portable Runtime Utility Library - PostgreSQL Driver
 libaprutil1-dbd-sqlite3 - Apache Portable Runtime Utility Library - SQLite3 Driver
 libaprutil1-dev - Apache Portable Runtime Utility Library - Development Headers
 libaprutil1-ldap - Apache Portable Runtime Utility Library - LDAP Driver
 libaprutil1t64 - Apache Portable Runtime Utility Library
Closes: 1143837
Changes:
 apr-util (1.6.3-3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload on behalf of Apache Team.
     (Closes: #1143837)
   * Fix CVE-2025-49506:
     Function apr_password_validate() was not constant-time with
     regards to hashes or passwords comparisons, potentially leaking
     their content via a side channel timing attack.
   * Fix CVE-2026-32327:
     A stack recursion attack against any library consumer
     which parses XML from untrusted sources and uses the
     apr_xml_quote_elem() function
   * Fix CVE-2026-34191:
     Improper Neutralization of Special Elements used
     in an SQL Command (SQL Injection) vulnerability
     in Apache Portable Runtime Utility via apr_dbd_oracle provider.
   * Fix CVE-2026-34501:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility redis client.
   * Fix CVE-2026-34502:
     Heap-based Buffer Overflow vulnerability in Apache Portable
     Runtime Utility memcached client
Checksums-Sha1:
 f3fd65e93ef3925329f06c3d56df2ae362199538 11454 apr-util_1.6.3-3+deb13u1_s390x-buildd.buildinfo
 146aa36d5f3dde9659171a04744e13c760b66b74 30392 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_s390x.deb
 b589dcd2b4e4db9a174ba73a40cae6fd20f7ae11 16264 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_s390x.deb
 2b33162b8f1fce3d694079d794d65ee95328e382 30424 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_s390x.deb
 a9b8ac53c2caa5e0a5a2725f6dc5791f95be6847 20176 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_s390x.deb
 99e1969bd1566e204c31218547aef0ab82da3d63 23148 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_s390x.deb
 41add99869ab2a231fdc79befe84112741f6ecc0 16196 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_s390x.deb
 dde6d37c351fb2fd31c784e6ca355dbadea64d9e 16940 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_s390x.deb
 c559086cc6c5b24257267887adba6578f0219575 14440 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_s390x.deb
 6186152ed0a721d11fbcb77a4c40f32254fd6a58 415820 libaprutil1-dev_1.6.3-3+deb13u1_s390x.deb
 b195f7873a78e1330c0f6ec46d2dae7efc2c264e 10584 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_s390x.deb
 292b270f5f4811a5239bc2aeb2dac7e057aa1d80 12324 libaprutil1-ldap_1.6.3-3+deb13u1_s390x.deb
 62c36f0498ed450764e7f53b1bee8d371455d2c5 262984 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_s390x.deb
 cf0d7799e6645af0ee88a61d169a991b4b9de5cc 90552 libaprutil1t64_1.6.3-3+deb13u1_s390x.deb
Checksums-Sha256:
 a6e0c9b481218ed666b33e0c3d4b6c3d87d40e0dab146579fc296600938bc3be 11454 apr-util_1.6.3-3+deb13u1_s390x-buildd.buildinfo
 2864bbcfedbea176a432e54a9977c9bc8c6938ff510412de7e05dc3e020a9cbb 30392 libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_s390x.deb
 701ecf3170cd0d3e7b319619f42cc17b40fda6a9316f8516bbd1d70bb78c1972 16264 libaprutil1-dbd-mysql_1.6.3-3+deb13u1_s390x.deb
 702f526fc2be767698095ac2a6abd458255a8c8e04bf294cd53b7b2e664141f6 30424 libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_s390x.deb
 bdae3fa3683b68253970c0ad0f6bdc03dac9ef3f215351915a425de3e6715db4 20176 libaprutil1-dbd-odbc_1.6.3-3+deb13u1_s390x.deb
 729fa0b32111a29b2b31f67e9944066dca41275bf75dd988087bcb45fd9f022c 23148 libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_s390x.deb
 6c8b3186ba1e0c5472621de376d323662c58d91a2ae59675f14c3a5173daf9cd 16196 libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_s390x.deb
 da3e58f590919a3a749dc73cd208d8b7c718ebc06047e4109128e55b19f6bb93 16940 libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_s390x.deb
 c23d76adfa397fff2d5e2ce51d2a96b6dfecd91e65c3502a5c65d1771b89ef85 14440 libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_s390x.deb
 a312ce89b14e25076c2e3e4c24e100445598aa0639ecff96caf332f9592f3b4f 415820 libaprutil1-dev_1.6.3-3+deb13u1_s390x.deb
 bfd848b3abf7ca1321029a38596176677f357a97135d94d7e9a3becd8ef877b3 10584 libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_s390x.deb
 2e81b834ecf00f1b39bfca92ddffe5857cc2cf0af3abff259ad1f19f8595296b 12324 libaprutil1-ldap_1.6.3-3+deb13u1_s390x.deb
 141c406fc5fe10131ab8d5edaf29ebbdb322c4af036fa1a0a4ec612bc05d38b3 262984 libaprutil1t64-dbgsym_1.6.3-3+deb13u1_s390x.deb
 2cd05a72223dad5e61623d2faf847c06c3ed80b7978c812fac147c561a697561 90552 libaprutil1t64_1.6.3-3+deb13u1_s390x.deb
Files:
 576cd0339b119b91f16cc951ed42daef 11454 libs optional apr-util_1.6.3-3+deb13u1_s390x-buildd.buildinfo
 c2dde003f0847043edf28308d6752abb 30392 debug optional libaprutil1-dbd-mysql-dbgsym_1.6.3-3+deb13u1_s390x.deb
 cd06a253c63226821325c365406c1cce 16264 libs optional libaprutil1-dbd-mysql_1.6.3-3+deb13u1_s390x.deb
 f7fe0110d04c81d537840a6c3a566064 30424 debug optional libaprutil1-dbd-odbc-dbgsym_1.6.3-3+deb13u1_s390x.deb
 07e50ea6522aa30adf4ce24b940c5582 20176 libs optional libaprutil1-dbd-odbc_1.6.3-3+deb13u1_s390x.deb
 692024e872fcbed449ff88d2b1b9dc08 23148 debug optional libaprutil1-dbd-pgsql-dbgsym_1.6.3-3+deb13u1_s390x.deb
 82a1e2d6751dd14ce829444cbca3df25 16196 libs optional libaprutil1-dbd-pgsql_1.6.3-3+deb13u1_s390x.deb
 34a24e8caf8263350fa564bd4393e513 16940 debug optional libaprutil1-dbd-sqlite3-dbgsym_1.6.3-3+deb13u1_s390x.deb
 7f1ad09da06590e3cb4c15582c93ffe2 14440 libs optional libaprutil1-dbd-sqlite3_1.6.3-3+deb13u1_s390x.deb
 06185de9178166a309e81bdd7958d279 415820 libdevel optional libaprutil1-dev_1.6.3-3+deb13u1_s390x.deb
 effb4e9566e6f03c4a45d2e2558cdc67 10584 debug optional libaprutil1-ldap-dbgsym_1.6.3-3+deb13u1_s390x.deb
 e4ab8543f2572a690033349ca7268496 12324 libs optional libaprutil1-ldap_1.6.3-3+deb13u1_s390x.deb
 75a136080677416530f7fd9e74408153 262984 debug optional libaprutil1t64-dbgsym_1.6.3-3+deb13u1_s390x.deb
 57df51ea69498ddbb94c7704202be61f 90552 libs optional libaprutil1t64_1.6.3-3+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=qYz3
-----END PGP SIGNATURE-----