[CLSA-2026:1786495987] apr-util: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-12 10:56:50 UTC
Description:
- CVE-2026-32327: apr-util: stack recursion crash parsing deeply nested XML in apr_xml_quote_elem() - CVE-2026-34502: apr-util: heap buffer overflow in the APR memcached client
CVEs fixed:
Updated packages:
  • apr-util-1.5.2-6.el7_9.1.tuxcare.els1.i686.rpm
    sha:16239152fde4f1bf6b6f4385b80f30ec0af7c55304de7ee9316aafa426acb9e6
  • apr-util-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:f3123d59cfc4887559e4f62e77bece0bcbb1cb9c7558d13a7353ee459e5287ea
  • apr-util-devel-1.5.2-6.el7_9.1.tuxcare.els1.i686.rpm
    sha:0137f648d9ab216d58696116fd357317d64adc31225f40041dba8ef7664e1662
  • apr-util-devel-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:0b8830ebcd576e857988395cf61b68e79cdf1748624ea5b841a8a63ff7729286
  • apr-util-ldap-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:4571b215bd4afe3a4d6f53dc257618a270e20ae345959c4ee8f33fc21d6c7d9f
  • apr-util-mysql-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:1ae0e61fa0f5d4f41928e6246701f4091d42eb6f22065a213867b62b25d2e374
  • apr-util-nss-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:eb74c794cd4d579400f06f5b70b1b29f0d8cfb66527b2e4220464d9b1a244960
  • apr-util-odbc-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:5888b17db9d242720074f14c77b868cbad0702edae604cc4cddc08be7c6cbb16
  • apr-util-openssl-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:3dde36dd86cf82ec019084f093d8685d30abb96c0e1285c867091993855b3ef3
  • apr-util-pgsql-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:b2fd8be1dad10a6f9ed6f0f4d03585a47d8b99c7b69ab42994c8d13d912104ca
  • apr-util-sqlite-1.5.2-6.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:4c17c73570c87adcc2c4b93c479ceaac53007ce8769323373bf3041ae95c8050
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.