[ALSA-2026:69113] Moderate: apr-util security update
Type:
security
Severity:
moderate
Release date:
2026-09-21
Description:
The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fix(es): * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) * apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) * apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack (CVE-2026-32327) * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 apr-util-sqlite-1.6.1-9.el8_10.1.aarch64.rpm 258db9dc2a7407510168e1bbede3a7866b4084421bd05c2e9195fa73c82c89b9
aarch64 apr-util-openssl-1.6.1-9.el8_10.1.aarch64.rpm 3934589a6fa6faa3697c4aed11ef86f1dcf6fc80806601f276ebd5d5490fd8c3
aarch64 apr-util-devel-1.6.1-9.el8_10.1.aarch64.rpm 45209b2bfb7a777558a36128f3d126a5c97d0e58f6a32000bf55f042e32134d8
aarch64 apr-util-odbc-1.6.1-9.el8_10.1.aarch64.rpm 6126ef0f6521e27b21d18ea0b096d6f7e8c5f5f6641b37a73af31d5c1da00674
aarch64 apr-util-ldap-1.6.1-9.el8_10.1.aarch64.rpm 7070c60279d17c2367355c4dabae52875f6c4056a1f793c72eed6193e8ad507f
aarch64 apr-util-1.6.1-9.el8_10.1.aarch64.rpm 768a3a742ba513d1aa1440c8d38d28c1f62adee4a6b3fd8224eb238b23a93acb
aarch64 apr-util-mysql-1.6.1-9.el8_10.1.aarch64.rpm aa19ce332aeb1f14ae8cea6f04ee255043e3b87785f3a450acedc266d05d9db8
aarch64 apr-util-pgsql-1.6.1-9.el8_10.1.aarch64.rpm b4f64071b656448fc1177d0c27c379e0e5bb6fe5db8953c49c728bcd527d42d6
aarch64 apr-util-bdb-1.6.1-9.el8_10.1.aarch64.rpm e010ddecfd5a04a68e154c21862dd1da3728e1d7878d7a5e52250e753dffc8df
i686 apr-util-devel-1.6.1-9.el8_10.1.i686.rpm 04fae8f86aab136b8357a477fd2b3fd4f786e4eb44704dd79caae3f7609a06bc
i686 apr-util-bdb-1.6.1-9.el8_10.1.i686.rpm 2295e5f99fa1d0861c77e65754153497909cea64679ff54c9b6aa8cde1f8e326
i686 apr-util-openssl-1.6.1-9.el8_10.1.i686.rpm 6bf3dd43d8e939de8f0ad33f512a0a9c863cf0ed5e7b25aafdf98af2004f6b69
i686 apr-util-1.6.1-9.el8_10.1.i686.rpm c198327ba89f82dace6946ff3ce6691560ff8159982ae3c7977bcc6df3f5e747
ppc64le apr-util-bdb-1.6.1-9.el8_10.1.ppc64le.rpm 07150fb7c92ffb6cf071a40fe62dc06b73b3d10a35bd7fde6df7de0337b6c3a4
ppc64le apr-util-ldap-1.6.1-9.el8_10.1.ppc64le.rpm 2322702a54e2d9d2fb77f971ad1bb90e4afd32ac46ea4607310e708e752cfba7
ppc64le apr-util-1.6.1-9.el8_10.1.ppc64le.rpm 2b8b75874caab043b3ae031c686d973d6fe4c0623b68cc58238e6f4bb4ca766a
ppc64le apr-util-openssl-1.6.1-9.el8_10.1.ppc64le.rpm 76f8a3274f3281c2bf58f0542841245e0e6bebbb7e8efbde08b723a612789a9c
ppc64le apr-util-odbc-1.6.1-9.el8_10.1.ppc64le.rpm 846c049af266d30d96136bc3aaa8fe94eca22fdfacc6fe2c1540adac4e04f040
ppc64le apr-util-mysql-1.6.1-9.el8_10.1.ppc64le.rpm 8b4a49516698782498b11ff207eabcde659914ab688e22055d9117cf04099d12
ppc64le apr-util-sqlite-1.6.1-9.el8_10.1.ppc64le.rpm b976deabed03edcd852791cb2cb1d3d9fbe1c3b8e2deead6ed58f769ac626e3e
ppc64le apr-util-devel-1.6.1-9.el8_10.1.ppc64le.rpm bd0829b1d4f331581159e2712b38b36e01d19b5b27f0308d9910d2d0950c036c
ppc64le apr-util-pgsql-1.6.1-9.el8_10.1.ppc64le.rpm bf29ab44420c1cf43b571ef43a3c63bb82159c3e113a4a277ef57108115729fc
s390x apr-util-ldap-1.6.1-9.el8_10.1.s390x.rpm 08d17a52f9d4efa92fde7f8e4f529e8eea7aa33bc0142a3cd2a811ceb1c4ec91
s390x apr-util-sqlite-1.6.1-9.el8_10.1.s390x.rpm 09605ba189340c99ef45d90ef887150cd10fe34bf335e70d036a38e6ee3de41d
s390x apr-util-openssl-1.6.1-9.el8_10.1.s390x.rpm 25144f6fb99f19b55f5bb18f0543bbcb3e35a9400121d65353c408156192f43a
s390x apr-util-devel-1.6.1-9.el8_10.1.s390x.rpm 5f9c3925be0624d436cadae5177e293cf6960f0126e477e8307bda4b678302e5
s390x apr-util-pgsql-1.6.1-9.el8_10.1.s390x.rpm 78edc1ba37a963e9448f0d71e972cfca3ed27d0d8c6a4e0cac26db1a5188b113
s390x apr-util-odbc-1.6.1-9.el8_10.1.s390x.rpm ab5b339673fbc46da5a0271772dcbf3a123f170d48f151a3ee4774c8bb026ca8
s390x apr-util-bdb-1.6.1-9.el8_10.1.s390x.rpm b58665baf8528d55fdfb0279accd333d161e21705d4d502adf03a9ceb033b776
s390x apr-util-1.6.1-9.el8_10.1.s390x.rpm c6e295c56508365c9fd1c00cc36700f8a9c714469357c2c4421990287fa70bf5
s390x apr-util-mysql-1.6.1-9.el8_10.1.s390x.rpm f23e82db8c79604d17ca335e4fc61b582ace0a843f4a4fbe9eb0d9701a35a490
x86_64 apr-util-odbc-1.6.1-9.el8_10.1.x86_64.rpm 0a0c60a2917a6b4a24893e8a6dd152ae8b911525d9b08314399d013284cc9986
x86_64 apr-util-openssl-1.6.1-9.el8_10.1.x86_64.rpm 5dae380892f20a7fbfb7423579f1f1b07588581a852f7666d9bb0794637f4bff
x86_64 apr-util-devel-1.6.1-9.el8_10.1.x86_64.rpm 6a347f69699726bafe367bd0b9c0c5e02f2cc92871520ebd5eb8ba566e0655fd
x86_64 apr-util-pgsql-1.6.1-9.el8_10.1.x86_64.rpm 75e839645ace84274f1f125a08b23df13c7314dcc13fc5cae050cc99b4fbc6e4
x86_64 apr-util-mysql-1.6.1-9.el8_10.1.x86_64.rpm 9b2efc642ef37f03762505bc738f85d5324b752d887caaa5c6e99cda739dd16d
x86_64 apr-util-1.6.1-9.el8_10.1.x86_64.rpm c1e823674dc4ce610ddb853763cbc8b16ece7a0de82608dcb3a28e51c0a71e8a
x86_64 apr-util-ldap-1.6.1-9.el8_10.1.x86_64.rpm c5a33404340f2e965e46660519a6346d161bf1d3df03c978507eb79a6afbd5dd
x86_64 apr-util-sqlite-1.6.1-9.el8_10.1.x86_64.rpm cbecd7bc115f9cfbaeb65482f51dbc1d37f0fbbe11caab1eaf640fe96d0b72ff
x86_64 apr-util-bdb-1.6.1-9.el8_10.1.x86_64.rpm e4c35cf1dfee6e7bef113ea4c059c397225692d292be729c5f34f355bf0d289d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.