critical Security update for apr-util

SUSE-SLE-Module-Basesystem-15-SP7-2026-3938

This update for apr-util fixes the following issues: - CVE-2022-25147: buffer overflow possible with specially crafted input (bsc#1207866). - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). - CVE-2026-34501: heap buffer overflow in redis client (bsc#1274852). - CVE-2026-34502: heap buffer overflow in APR memcached client (bsc#1274854).

• Release Date
  Sep 3 2026
• References
  Bugzilla: 1207866, 1274235, 1274237, 1274850, 1274852, 1274854
  CVEs: CVE-2022-25147, CVE-2025-49506, CVE-2026-32327, CVE-2026-34191, CVE-2026-34501, CVE-2026-34502
• Type
  security
• Severity
  critical

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  apr-util
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock src

  apr-util-devel
  Development files for the Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm

  libapr-util1
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  apr-util
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock src

  apr-util-devel
  Development files for the Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm

  libapr-util1
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  apr-util
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock src

  apr-util-devel
  Development files for the Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm

  libapr-util1
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  apr-util
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock src

  apr-util-devel
  Development files for the Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm

  libapr-util1
  Apache Portable Runtime (APR) Utility Library

  1.6.1-150600.27.3.1 lock rpm