| Package | apr-util |
|---|---|
| Version | 1.6.1-4+deb10u2 (buster) |
| Related CVEs | CVE-2025-49506 CVE-2026-32327 CVE-2026-34191 CVE-2026-34501 CVE-2026-34502 |
Several vulnerabilities were discovered in apr-util, the Apache Portable Runtime Utility library, which could result in denial of service or potentially the execution of arbitrary code.
For Debian 10 buster, these problems have been fixed in version 1.6.1-4+deb10u2.
We recommend that you upgrade your apr-util packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.