Skip to content
Moderate Security Advisory ELSA-2026-66341-0 for apr

Moderate Security Advisory ELSA-2026-66341-0 for apr

Linuxsecurity •LinuxSecurity Advisories • September 14, 2026

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

[1.6.1-23.1] - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327)

[1.6.1-23.1] - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327)

apr-util-1.6.1-23.el9_8.1.i686.rpm apr-util-1.6.1-23.el9_8.1.x86_64.rpm apr-util-bdb-1.6.1-23.el9_8.1.i686.rpm apr-util-bdb-1.6.1-23.el9_8.1.x86_64.rpm apr-util-devel-1.6.1-23.el9_8.1.i686.rpm apr-util-devel-1.6.1-23.el9_8.1.x86_64.rpm apr-util-ldap-1.6.1-23.el9_8.1.x86_64.rpm apr-util-mysql-1.6.1-23.el9_8.1.x86_64.rpm apr-util-odbc-1.6.1-23.el9_8.1.x86_64.rpm apr-util-openssl-1.6.1-23.el9_8.1.x86_64.rpm apr-util-pgsql-1.6.1-23.el9_8.1.x86_64.rpm apr-util-sqlite-1.6.1-23.el9_8.1.x86_64.rpm

apr-util-1.6.1-23.el9_8.1.i686.rpm apr-util-1.6.1-23.el9_8.1.x86_64.rpm apr-util-bdb-1.6.1-23.el9_8.1.i686.rpm apr-util-bdb-1.6.1-23.el9_8.1.x86_64.rpm apr-util-devel-1.6.1-23.el9_8.1.i686.rpm apr-util-devel-1.6.1-23.el9_8.1.x86_64.rpm apr-util-ldap-1.6.1-23.el9_8.1.x86_64.rpm apr-util-mysql-1.6.1-23.el9_8.1.x86_64.rpm apr-util-odbc-1.6.1-23.el9_8.1.x86_64.rpm apr-util-openssl-1.6.1-23.el9_8.1.x86_64.rpm apr-util-pgsql-1.6.1-23.el9_8.1.x86_64.rpm apr-util-sqlite-1.6.1-23.el9_8.1.x86_64.rpm

apr-util-1.6.1-23.el9_8.1.aarch64.rpm apr-util-bdb-1.6.1-23.el9_8.1.aarch64.rpm apr-util-devel-1.6.1-23.el9_8.1.aarch64.rpm apr-util-ldap-1.6.1-23.el9_8.1.aarch64.rpm apr-util-mysql-1.6.1-23.el9_8.1.aarch64.rpm apr-util-odbc-1.6.1-23.el9_8.1.aarch64.rpm apr-util-openssl-1.6.1-23.el9_8.1.aarch64.rpm apr-util-pgsql-1.6.1-23.el9_8.1.aarch64.rpm apr-util-sqlite-1.6.1-23.el9_8.1.aarch64.rpm

apr-util-1.6.1-23.el9_8.1.aarch64.rpm apr-util-bdb-1.6.1-23.el9_8.1.aarch64.rpm apr-util-devel-1.6.1-23.el9_8.1.aarch64.rpm apr-util-ldap-1.6.1-23.el9_8.1.aarch64.rpm apr-util-mysql-1.6.1-23.el9_8.1.aarch64.rpm apr-util-odbc-1.6.1-23.el9_8.1.aarch64.rpm apr-util-openssl-1.6.1-23.el9_8.1.aarch64.rpm apr-util-pgsql-1.6.1-23.el9_8.1.aarch64.rpm apr-util-sqlite-1.6.1-23.el9_8.1.aarch64.rpm

Related CVEs: CVE-2025-49506 CVE-2026-32327 CVE-2026-34501 CVE-2026-34502

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases