Alpine/apr-util: critical 9.1
A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function.
Action: Upgrade apr-util to 1.6.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.4-r0 | - |
Fixed versions
| 1.6.4-r0 |
Sources
- osv: ALPINE-CVE-2026-32327#Alpine:v3.22/apr-util
- https://security.alpinelinux.org/vuln/CVE-2026-32327
published · modified · JSON