[ubuntu/jammy-security] apr-util 1.6.1-5ubuntu4.22.04.3 (Accepted)

John Breton john.breton at canonical.com
Thu Sep 3 11:14:10 UTC 2026


apr-util (1.6.1-5ubuntu4.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Timing side-channel attack
    - debian/patches/CVE-2025-49506.patch: Merge r1936804 from aprutil 1.7.x:
    - CVE-2025-49506
  * SECURITY UPDATE: Improper input validation
    - debian/patches/CVE-2026-32327_pre1.patch: Merge r1914772 from 1.7.x:
    - debian/patches/CVE-2026-32327.patch: Merge r1936807 from 1.7.x:
    - CVE-2026-32327
  * SECURITY UPDATE: Improper input validation
    - debian/patches/CVE-2026-34501.patch: Merge r1936809 from aprutil 1.7.x:
    - CVE-2026-34501
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2026-34502.patch: Merge r1936812 from aprutil 1.7.x:
    - CVE-2026-34502

Date: 2026-09-02 16:12:20.041430+00:00
Changed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/apr-util/1.6.1-5ubuntu4.22.04.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the jammy-changes mailing list