Debian/apr-util: high 7.5
APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timin
Action: Upgrade apr-util to 1.6.3-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.3-1+deb12u1 | - |
Fixed versions
| 1.6.3-1+deb12u1 |
Sources
published · modified · JSON