[ALSA-2026:66341] Moderate: apr-util security update
Type:
security
Severity:
moderate
Release date:
2026-09-10
Description:
The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fix(es): * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) * apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) * apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack (CVE-2026-32327) * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 apr-util-devel-1.6.1-23.el9_8.1.aarch64.rpm 12f4d52047229045089560ab331dabc9ef9c14b9401a7906545c104c1df13e33
aarch64 apr-util-openssl-1.6.1-23.el9_8.1.aarch64.rpm 4d6fc047530d4144bda49004a2a2c9dc72c7901a872da7c1a29c2842812a4bf1
aarch64 apr-util-odbc-1.6.1-23.el9_8.1.aarch64.rpm 6cc2cc97f68a426ed2cd83abf9cc4feabdb6e20d7da24e63f6161c864457bfe5
aarch64 apr-util-bdb-1.6.1-23.el9_8.1.aarch64.rpm 8227b4978a8f98805fbcb03d3434dd0443a89bd3ed66eb632fefec733951b156
aarch64 apr-util-1.6.1-23.el9_8.1.aarch64.rpm 9247220381f659251d1cff2a8a93408339020b9eaa936ca3efdb77634f9d25b5
aarch64 apr-util-mysql-1.6.1-23.el9_8.1.aarch64.rpm a20736d85973e1b73dd0ef24289fca7326bfe81a1a4d7efec77302d690035e5c
aarch64 apr-util-pgsql-1.6.1-23.el9_8.1.aarch64.rpm b084894120ca62eb243077f299634e8e997615aca32faf365fad86b5e82511e7
aarch64 apr-util-ldap-1.6.1-23.el9_8.1.aarch64.rpm c0c433b1fda5b974fa889aacde0579629f8d19e48a1d288849cb1be24d3d5289
aarch64 apr-util-sqlite-1.6.1-23.el9_8.1.aarch64.rpm f4d591ee69744ee665fb4f7e79736793567a9a8b52506f817b7909c32cbb8cbf
i686 apr-util-devel-1.6.1-23.el9_8.1.i686.rpm 20f05588b028732b414ea1663377050505f479d4f353d980d46fe3d980e2cc70
i686 apr-util-1.6.1-23.el9_8.1.i686.rpm 4363581de36585e3bd1ce256fa8772113e17ee4a6bc2a736e19867fc5258da4d
i686 apr-util-bdb-1.6.1-23.el9_8.1.i686.rpm 766ed3130aef3f75b08d64c44a7d4f89b38ba884f4d363384426a75d89f118db
ppc64le apr-util-bdb-1.6.1-23.el9_8.1.ppc64le.rpm 44872548fd59a7b7ff4d896c65d239388255b7355741867c7c9a8555fcbf12a6
ppc64le apr-util-sqlite-1.6.1-23.el9_8.1.ppc64le.rpm 5b03322d5aaa943c29221468f35db46fd48f9cc5689ad62f977b177ad50c88dc
ppc64le apr-util-devel-1.6.1-23.el9_8.1.ppc64le.rpm 605e1acae3ed98641e3c0e446c902bce20be7c842998db8149be4a85107f0e20
ppc64le apr-util-1.6.1-23.el9_8.1.ppc64le.rpm 72255dcbff954e7969712207694d447e1375d0850dad350a6a484dc7d90a174c
ppc64le apr-util-openssl-1.6.1-23.el9_8.1.ppc64le.rpm 87ed5c32bb8812efc3540a259e500e5b7f740158e4bbde50e292d49ca9d09c46
ppc64le apr-util-ldap-1.6.1-23.el9_8.1.ppc64le.rpm c8e091413ecf9cd6c63ddcef10db53d30f33d0bc0d181236feecd00b70a949f4
ppc64le apr-util-pgsql-1.6.1-23.el9_8.1.ppc64le.rpm ddc118aae31c9456fa64b5349513ddd21d2cbb929219cb03f9b607d21d8a61de
ppc64le apr-util-mysql-1.6.1-23.el9_8.1.ppc64le.rpm e8606f8055fda86489811906e49635be2dc61607e0e1b89e1819da1288e32d7e
ppc64le apr-util-odbc-1.6.1-23.el9_8.1.ppc64le.rpm fa48444bb7b88ac158f60f5e90bf9670112fd836780b52d398895acd9a7cf767
s390x apr-util-sqlite-1.6.1-23.el9_8.1.s390x.rpm 3828299cbe5d38071441583a47feac747b7fe81094d0a7ed11e92bc15cedb115
s390x apr-util-devel-1.6.1-23.el9_8.1.s390x.rpm 406202a852de0b144519f049e2d2f84b12e254ce2f53a3ec3b49b17092228dcb
s390x apr-util-1.6.1-23.el9_8.1.s390x.rpm 65b0ea5a80aeac07f6330faa199d9dd05632acacdf27822529a28c9e56853f28
s390x apr-util-bdb-1.6.1-23.el9_8.1.s390x.rpm 77c1c74c2659e429153df0008e484485fbca448aff5497ba21ba2c384deda335
s390x apr-util-openssl-1.6.1-23.el9_8.1.s390x.rpm 805dc6d38f91043646a49dd690bce9707563fd1d0361612cbaf60c2595352a5d
s390x apr-util-odbc-1.6.1-23.el9_8.1.s390x.rpm 84a1c364a57868ee7f6f8d3ed4b4d5daed6cdda60eee29f449e858c76c8af7b5
s390x apr-util-mysql-1.6.1-23.el9_8.1.s390x.rpm 8b8d74529eb97b4cff33ae14abd1c6b27a4db51b6548c5d312e814f4a14bca06
s390x apr-util-pgsql-1.6.1-23.el9_8.1.s390x.rpm 91e830298f6f89ae1a541f4a8af96d7d52ef898cfc4c675402add2466e007306
s390x apr-util-ldap-1.6.1-23.el9_8.1.s390x.rpm 98e219835e0c2f1629f09bea757a27c5dd4ad9d80ce9b60d589697aac7d55ab8
x86_64 apr-util-1.6.1-23.el9_8.1.x86_64.rpm 023fae22a1712b8fe27dcdba7e0db4c06699b1a2358f1dd6bb6c6979abf87a03
x86_64 apr-util-mysql-1.6.1-23.el9_8.1.x86_64.rpm 2af00b0d493bdfcb194edc3d0544114a874396f3261f4477354de9e3584a4d3d
x86_64 apr-util-sqlite-1.6.1-23.el9_8.1.x86_64.rpm 39f9f47951a25d99828ca698063d97657b6723f5705e9bb536ab1eea1888ab62
x86_64 apr-util-devel-1.6.1-23.el9_8.1.x86_64.rpm 6eaf13a4ac3d3b424a1dbcea5084226437a9a7e8bd1649c998d053d1eabd9734
x86_64 apr-util-ldap-1.6.1-23.el9_8.1.x86_64.rpm 952789eb473bf51d37b785426aed1a9e19526ff5896e032e7d8dc4ac44c73824
x86_64 apr-util-pgsql-1.6.1-23.el9_8.1.x86_64.rpm 9a6b8ff4b93566c95f314d3c640dbd5e9ebc509a9023e0fcfe0f8617d04d0524
x86_64 apr-util-openssl-1.6.1-23.el9_8.1.x86_64.rpm cdeaa64fdf5b9dce70ca7f31a8a82bcd919dd2512729c3121ed557b695cfe34f
x86_64 apr-util-odbc-1.6.1-23.el9_8.1.x86_64.rpm e08bf94f1616fff28d6d6a6999641b726256dfbdad794bdf0997dc036becaa83
x86_64 apr-util-bdb-1.6.1-23.el9_8.1.x86_64.rpm f6af1563ef7e69d525ccf23c3964b644ec4ddfd19cda62fb81c09f55fa4e4eaa
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.