https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T02:29:20.508186+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/alsa-2026:66341 ALSA-2026:66341 — Moderate: apr-util security update 2026-09-29T02:29:20.697763+00:00

Affected: AlmaLinux:9: apr-util, AlmaLinux:9: apr-util-bdb, AlmaLinux:9: apr-util-devel, AlmaLinux:9: apr-util-ldap, AlmaLinux:9: apr-util-mysql, AlmaLinux:9: apr-util-odbc, AlmaLinux:9: apr-util-openssl, AlmaLinux:9: apr-util-pgsql, AlmaLinux:9: apr-util-sqlite

The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more.

Security Fix(es):

* apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) * apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) * apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack (CVE-2026-32327) * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://db.gcve.eu/vuln/fkie_cve-2026-34502 fkie_cve-2026-34502 2026-09-29T02:29:20.697876+00:00

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client

This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.

 https://db.gcve.eu/vuln/ghsa-m2cw-c66m-j23g GHSA-m2cw-c66m-j23g 2026-09-29T02:29:20.697908+00:00

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client

This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.

 https://db.gcve.eu/vuln/msrc_cve-2026-34502 msrc_CVE-2026-34502 — Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client 2026-09-29T02:29:20.697925+00:00 msrc_CVE-2026-34502 https://db.gcve.eu/vuln/oesa-2026-3325 OESA-2026-3325 — apr-util security update 2026-09-29T02:29:20.697952+00:00

Affected: openEuler:20.03-LTS-SP4: apr-util

The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features. Security Fix(es):

APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt() such as  Windows, BeOS, NetWare, or Android.

Users are recommended to upgrade to version 1.6.4, which fixes this issue.(CVE-2025-49506)

A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function.

Users are recommended to upgrade to version 1.6.4, which fixes this issue.(CVE-2026-32327)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.

This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3(CVE-2026-34191)…

 https://db.gcve.eu/vuln/opensuse-su-2026:21672-1 openSUSE-SU-2026:21672-1 — Security update for apr-util 2026-09-29T02:29:20.698001+00:00

Security update for apr-util

 https://db.gcve.eu/vuln/rhsa-2026:58474 RHSA-2026:58474 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-09-29T02:29:20.698019+00:00

apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

 https://db.gcve.eu/vuln/suse-su-2026:3905-1 SUSE-SU-2026:3905-1 — Security update for libapr-util1 2026-09-29T02:29:20.698044+00:00

Security update for libapr-util1

 https://db.gcve.eu/vuln/ubuntu-cve-2026-34502 UBUNTU-CVE-2026-34502 2026-09-29T02:29:20.698058+00:00

Affected: Ubuntu:Pro:14.04:LTS: apr-util, Ubuntu:Pro:18.04:LTS: apr-util, Ubuntu:Pro:20.04:LTS: apr-util, Ubuntu:22.04:LTS: apr-util, Ubuntu:24.04:LTS: apr-util, Ubuntu:26.04:LTS: apr-util

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.

 https://db.gcve.eu/vuln/wid-sec-w-2026-2697 WID-SEC-W-2026-2697 — Apache Portable Runtime (APR): Mehrere Schwachstellen 2026-09-29T02:29:20.698085+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Portable Runtime (APR) ausnutzen, um SQL-Injection durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.