[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-34191/apr-util

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Aug 13 05:02:31 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
264f9cbd by Salvatore Bonaccorso at 2026-08-13T06:02:04+02:00
Update status for CVE-2026-34191/apr-util

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7272,9 +7272,10 @@ CVE-2026-34501 (Heap-based Buffer Overflow vulnerability in Apache Portable Runt
 	NOTE: https://lists.apache.org/thread/o8h6c7cq86fplxlnry6c3rn9x0ovq8mv
 	NOTE: Fixed by: https://github.com/apache/apr-util/commit/e8f36bd5f1cc1c82bed1ae52d5699a4c610251c2 (1.6.4-rc1-candidate)
 CVE-2026-34191 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	- apr-util 1.6.4-1 (bug #1143837)
+	- apr-util 1.6.4-1 (bug #1143837; unimportant)
 	NOTE: https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf
 	NOTE: Fixed by: https://github.com/apache/apr-util/commit/6ce807e0f12b666c72ffce1a0f21b4df03fa13ec (1.6.4-rc1-candidate)
+	NOTE: apr_dbd_oracle provider not built in Debian packages
 CVE-2026-32548 (Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-32469 (Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/264f9cbd6f3560256d65f8aee14d5d399bdc7a8e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/264f9cbd6f3560256d65f8aee14d5d399bdc7a8e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260813/cc41093a/attachment.htm>


More information about the debian-security-tracker-commits mailing list