-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4742-1 [email protected]
https://www.debian.org/lts/security/ Bastien Roucariès
August 16, 2026 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : apr-util
Version : 1.6.1-5+deb11u2 1.6.3-1+deb12u1
CVE ID : CVE-2025-49506 CVE-2026-32327 CVE-2026-34191 CVE-2026-34501
CVE-2026-34502
Debian Bug : 1143837
Several vulnerabilities were discovered in apr-util, the Apache Portable
Runtime Utility library, which could result in denial of service or
potentially the execution of arbitrary code.
For Debian 11 bullseye, these problems have been fixed in version
1.6.1-5+deb11u2.
For Debian 12 bookworm, these problems have been fixed in version
1.6.3-1+deb12u1.
We recommend that you upgrade your apr-util packages.
For the detailed security status of apr-util please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/apr-util
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=EDP5
-----END PGP SIGNATURE-----
