Thank you for your contribution to Debian.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 07 Aug 2026 16:47:11 +0200 Source: apr-util Architecture: source Version: 1.6.4-1 Distribution: unstable Urgency: medium Maintainer: Debian Apache Maintainers <[email protected]> Changed-By: Stefan Fritsch <[email protected]> Closes: 1137309 1143837 Changes: apr-util (1.6.4-1) unstable; urgency=medium . * New upstream release. Closes: #1143837 - CVE-2025-49506: apr_password_validate() vulnerable to timing attack - CVE-2026-32327: XML stack recursion crash - CVE-2026-34191: SQL Injection in apr_dbd_oracle - CVE-2026-34501: Heap buffer overflow in APR redis client - CVE-2026-34502: Heap buffer overflow in APR memcached client * Switch Build-Depends to libmariadb-dev-compat. Closes: #1137309 Checksums-Sha1: 05cf8eed3049bbc4064b19469f89b500fde25a33 2785 apr-util_1.6.4-1.dsc 913c44f9fdfb4ce7c270a71a52402d33adcd99b6 441511 apr-util_1.6.4.orig.tar.bz2 0f6ce32a62a43287583020980f4ee92863a6ddd9 898 apr-util_1.6.4.orig.tar.bz2.asc 628aff0f2656a2445f534e90e3bc4c83efd96be8 341248 apr-util_1.6.4-1.debian.tar.xz 7cc98e36a29cf49fc43ebf63d87cf883bdf590fc 8868 apr-util_1.6.4-1_source.buildinfo Checksums-Sha256: 1949bd1da9929e3fa89e7dc3228a9ff229ef4e051859e08c4276088a27a5ebe0 2785 apr-util_1.6.4-1.dsc 3e2ae08f40efa0c3701e54a954cefa08242de22a69f91a8ae44fc1e624ba309b 441511 apr-util_1.6.4.orig.tar.bz2 17eb58050f65c3889195f3077e36521a9af3e36b100efef690f50916c3116bf8 898 apr-util_1.6.4.orig.tar.bz2.asc c7b5d7f28207a71d2da66097c0cec9f5c16d8df5a4e2749668de9bd9387b2c52 341248 apr-util_1.6.4-1.debian.tar.xz ae3cad3210b39b1d6decc8ba3dcbeb87cebdfeb8b007aa4302b705331f615a78 8868 apr-util_1.6.4-1_source.buildinfo Files: 6ed9c453a7b2fac39ceaf4b52f75e18c 2785 libs optional apr-util_1.6.4-1.dsc 8c933056e21005f69225ec6ffd0a16d3 441511 libs optional apr-util_1.6.4.orig.tar.bz2 97e710b9cfafb504e05535cd333ac2b6 898 libs optional apr-util_1.6.4.orig.tar.bz2.asc 77fe06bcd2cc04a3e31f6a2865a9b304 341248 libs optional apr-util_1.6.4-1.debian.tar.xz f0636d01caa704fced3bce64f3549a48 8868 libs optional apr-util_1.6.4-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOpiNza8JqByyYYsxxodfNUHO/eAFAmp18PAACgkQxodfNUHO /eBhtw/+MlsN3Ims0oKb/8dh+6wpC2OVgsHVfZ+3Fh/HIyhBWPtXKjTKVs4qsgpH /oaM2YoFmNg9u18ZuK3tPbso9ZVyBLod/hjhdBf2bY9v1rSa6FmF1rugKMuGFPid JqBgHkUqV2BbgTsuUNsgzzDq1jA0n+WMeD6ZNbuYz1IavoaU1p8GkoTAECGdayVf Qvvt5aP1jJK7uortJY8+qQ+KghcoNCnNa6BHewmF9U9j1GnBcn5bMuhIc1fh1x0D jKoKiu+Pba7AlwwCy7pKM+YGPrFgkUrL1LsWt7VPqB2HhA7LdUAng0+qfOk+4lWJ qdgcBPh8EZ0RZZWNGJMjsr7W5GMW4iNHnNmoNqw2zO1E9610R9dfs/kENqkv5yg9 Qt0lv7zGdD29e6epY87pUN/UQxHOlOUsMUuobMxqJ3qhmtE5NKidr7i6fXAR2qUc lh+AT7EqhUCqu7Z1ztSdDaChfK7EDNTnh+vGRApjo4Mgy02dTRjv++RRsNfqvyYN wL9ceJmTCxH4e5PaBGtTSlC6lz0B6+Cpzzz19E4N0LZ2zMEEuyvhIJYe2UMIgE7N rqZbKzkVDrAAe4/EW1Y6pE6HAkl8OCC4DzU5Bum2QaKb8+ozsTYT6rTl00AL9ftG L6wV3FVm6ZVavnT5kfdFFrox+iXsBZnONqA2KluS3u+SL+HqZXA= =tihJ -----END PGP SIGNATURE-----
pgpHR3FWbMQio.pgp
Description: PGP signature
