Debian Patches
Status for apr-util/1.6.3-1+deb12u1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2026-32327.patch | Merge r1936807 from 1.7.x: limit XML processing depth Submitted By: jorton Reviewed By: jorton, jfclere, ivan |
Joe Orton <jorton@apache.org> | yes | upstream | https://github.com/apache/apr-util/commit/414e12e427c89f135d8ee66ab1203feffd3e2bd8 | 2026-08-03 |
| CVE-2025-49506.patch | Merge r1936804 from aprutil 1.7.x: use timing safe comparison Submitted By: ylavic Reviewed By: ylavic, rpluem, covener |
Eric Covener <covener@apache.org> | yes | upstream | https://github.com/apache/apr-util/commit/f77a20761cb15686f8d4de5b5eafc534ae24b19e | 2026-08-03 |
| CVE-2026-32327_pre1.patch | Merge r1914772 from 1.7.x: * test/testutil.h: Define APR_ASSERT_SUCCESS for compatibility with apr trunk. |
Joe Orton <jorton@apache.org> | no | https://github.com/apache/apr-util/commit/dba5d434dba0547478f411d6fa068766455446ce | 2023-12-19 | |
| configure_in_remove_syspaths.patch | Adjust LDFLAGS and INCLUDE | Tollef Fog Heen <tfheen@debian.org> | no | |||
| buildconf_config.guess_sub_location.patch | Adjust path of config.guess and config.sub | Tollef Fog Heen <tfheen@debian.org> | no | |||
| debian_layout_fix.patch | Fix the includedir in the Debian layout. =================================================================== |
<tfheen@debian.org> | no | |||
| dont_use_all_pg_build_deps.patch | Link directly to postgresql =================================================================== |
Ryan Niebur <RyanRyan52@gmail.com> | no | |||
| avoid_ldap_by_defaut.patch | by default --avoid-ldap since apache2 is the only user, and we don't want to add extra dependencies to other apr-utils rdepends | Ryan Niebur <ryanryan52@gmail.com> | no | |||
| apu_config_dont_list_indep_libs.patch | Prevent recursive linking of dependent libraries by apr-util users. | Peter Samuelson <peter@p12n.org> | no | |||
| avoid_db_by-default.patch | Make apu-config not output dbm libs by default. See #622081 | Stefan Fritsch <sf@debian.org> | no | |||
| test_verbose | =================================================================== | no | ||||
| fix_doxygen_inputdir | =================================================================== | no | ||||
| doxygen_no_ful_path_names.patch | # FULL_PATH_NAMES breaks reproducible builds | no | ||||
| dbm_read_hash_or_btree.patch | Be more liberal in the types of DBM files we accept. | Adam Conrad <adconrad@0c3.net> | no | |||
| CVE-2026-34191.patch | Merge r1936816 from aprutil 1.7.x: Merge r1936814 from apr trunk: apr_dbd: oracle escaping Reviewed By: covener, jorton, jfclere |
Eric Covener <covener@apache.org> | yes | debian upstream | https://github.com/apache/apr-util/commit/6ce807e0f12b666c72ffce1a0f21b4df03fa13ec | 2026-08-03 |
| CVE-2026-34501.patch | Merge r1936809 from aprutil 1.7.x: Merge r1936808 from apr trunk: apr_redis error checking Submitted By: jfclere Reviewed By: jfclere, jorton, covener |
Eric Covener <covener@apache.org> | yes | debian upstream | https://github.com/apache/apr-util/commit/e8f36bd5f1cc1c82bed1ae52d5699a4c610251c2 | 2026-08-03 |
| CVE-2026-34502.patch | Merge r1936812 from aprutil 1.7.x: Merge r1936811 from apr trunk: apr_memcache: error checking Reviewed By: covener, jorton, jfclere |
Eric Covener <covener@apache.org> | yes | debian upstream | https://github.com/apache/apr-util/commit/f1c98dd0847c43375daf3789c936685adbc6d872 | 2026-08-03 |
All known versions for source package 'apr-util'
- 1.6.4-2 (sid, forky)
- 1.6.3-3+deb13u1 (trixie, trixie-security)
- 1.6.3-1+deb12u1 (bookworm-security)
- 1.6.3-1 (bookworm)