Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-34191 →

DEBIAN-CVE-2026-34191

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_orac...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 apr-util

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-1+deb12u1"}]}]

Debian:13 apr-util

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-3+deb13u1"}]}]

Debian:14 apr-util

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.4-1"}]}]

Références

advisory security-tracker.debian.org