# apr-util security updates

Patch Radar has 46 security fixes for apr-util, closing 6 CVEs. The newest is ELSA-2026-69113 (0:1.6.1-9.el8_10.1), released September 23, 2026.

- Web page: https://patchblox.com/security/product/linux/apr-util
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ELSA-2026-69113](https://patchblox.com/security/data/fix/linux/elsa-2026-69113.md) | Sep 23, 2026 | ol 8 0:1.6.1-9.el8_10.1 | High | 4 | 0 |
| [RHSA-2026:69113](https://patchblox.com/security/data/fix/linux/rhsa-2026-69113.md) | Sep 22, 2026 | RHEL 8 0:1.6.1-9.el8_10.1 | High | 4 | 0 |
| [RLSA-2026:69113](https://patchblox.com/security/data/fix/linux/rlsa-2026-69113.md) | Sep 22, 2026 | rocky 8 0:1.6.1-9.el8_10.1 | High | 4 | 0 |
| [ALSA-2026:69113](https://patchblox.com/security/data/fix/linux/alsa-2026-69113.md) | Sep 21, 2026 | almalinux 8 1.6.1-9.el8_10.1 | High | 4 | 0 |
| [RHSA-2026:66341](https://patchblox.com/security/data/fix/linux/rhsa-2026-66341.md) | Sep 13, 2026 | RHEL 9 0:1.6.1-23.el9_8.1 | High | 4 | 0 |
| [RLSA-2026:66392](https://patchblox.com/security/data/fix/linux/rlsa-2026-66392.md) | Sep 11, 2026 | rocky 10 0:1.6.3-23.el10_2.1 | High | 4 | 0 |
| [RLSA-2026:66341](https://patchblox.com/security/data/fix/linux/rlsa-2026-66341.md) | Sep 11, 2026 | rocky 9 0:1.6.1-23.el9_8.1 | High | 4 | 0 |
| [ALSA-2026:66341](https://patchblox.com/security/data/fix/linux/alsa-2026-66341.md) | Sep 10, 2026 | almalinux 9 1.6.1-23.el9_8.1 | High | 4 | 0 |
| [ALSA-2026:66392](https://patchblox.com/security/data/fix/linux/alsa-2026-66392.md) | Sep 10, 2026 | almalinux 10 1.6.3-23.el10_2.1 | High | 4 | 0 |
| [ELSA-2026-66341-0](https://patchblox.com/security/data/fix/linux/elsa-2026-66341-0.md) | Sep 10, 2026 | ol 9 0:1.6.1-23.el9_8.1 | High | 4 | 0 |
| [ELSA-2026-66392-0](https://patchblox.com/security/data/fix/linux/elsa-2026-66392-0.md) | Sep 10, 2026 | ol 10 0:1.6.3-23.el10_2.1 | High | 4 | 0 |
| [SUSE-SU-2026:3938-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3938-1.md) | Sep 3, 2026 | sles 15.6 1.6.1-150600.27.3.1 | Urgent | 6 | 0 |
| [SUSE-SU-2026:3938-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3938-1.md) | Sep 3, 2026 | sles 15.7 1.6.1-150600.27.3.1 | Urgent | 6 | 0 |
| [ALAS2023-2026-2115](https://patchblox.com/security/data/fix/linux/alas2023-2026-2115.md) | Aug 31, 2026 | amzn 2023 1.6.5-1.amzn2023.0.1 | High | 4 | 0 |
| [SUSE-SU-2026:23551-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23551-1.md) | Aug 28, 2026 | sles 16.0 1.6.3-160000.3.1 | Urgent | 5 | 0 |
| [OPENSUSE-SU-2026:21672-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21672-1.md) | Aug 28, 2026 | opensuse-leap 16.0 1.6.3-160000.3.1 | Urgent | 5 | 0 |
| [DEBIAN-CVE-2026-34191](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34191.md) | Aug 13, 2026 | Debian 13.5 (trixie) 1.6.3-3+deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-34191](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34191.md) | Aug 13, 2026 | Debian 14 1.6.4-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-34191](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34191.md) | Aug 13, 2026 | Debian 12.15 (bookworm) 1.6.3-1+deb12u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-34501](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34501.md) | Aug 13, 2026 | Debian 13.5 (trixie) 1.6.3-3+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34501](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34501.md) | Aug 13, 2026 | Debian 14 1.6.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34501](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34501.md) | Aug 13, 2026 | Debian 12.15 (bookworm) 1.6.3-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34502](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34502.md) | Aug 13, 2026 | Debian 13.5 (trixie) 1.6.3-3+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34502](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34502.md) | Aug 13, 2026 | Debian 14 1.6.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34502](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34502.md) | Aug 13, 2026 | Debian 12.15 (bookworm) 1.6.3-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32327](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32327.md) | Aug 13, 2026 | Debian 13.5 (trixie) 1.6.3-3+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32327](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32327.md) | Aug 13, 2026 | Debian 14 1.6.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32327](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32327.md) | Aug 13, 2026 | Debian 12.15 (bookworm) 1.6.3-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-49506](https://patchblox.com/security/data/fix/linux/debian-cve-2025-49506.md) | Aug 13, 2026 | Debian 13.5 (trixie) 1.6.3-3+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-49506](https://patchblox.com/security/data/fix/linux/debian-cve-2025-49506.md) | Aug 13, 2026 | Debian 14 1.6.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-49506](https://patchblox.com/security/data/fix/linux/debian-cve-2025-49506.md) | Aug 13, 2026 | Debian 12.15 (bookworm) 1.6.3-1+deb12u1 | High | 1 | 0 |
| [FEDORA-2026-1BA2DF871E](https://patchblox.com/security/data/fix/linux/fedora-2026-1ba2df871e.md) | Aug 10, 2026 | Fedora 43 1.6.5-1.fc43 | High | 1 | 0 |
| [RHSA-2026:66392](https://patchblox.com/security/data/fix/linux/rhsa-2026-66392.md) | Aug 6, 2026 | RHEL 10 1.6.3-23.el10_2.1 | High | 4 | 0 |
| [RLSA-2023:3147](https://patchblox.com/security/data/fix/linux/rlsa-2023-3147.md) | Jun 24, 2023 | rocky 9 0:1.6.1-20.el9_2.1 | Routine | 1 | 0 |
| [ELSA-2023-3109](https://patchblox.com/security/data/fix/linux/elsa-2023-3109.md) | May 24, 2023 | ol 8 0:1.6.1-6.el8_8.1 | Routine | 1 | 0 |
| [RLSA-2023:3109](https://patchblox.com/security/data/fix/linux/rlsa-2023-3109.md) | May 17, 2023 | rocky 8 0:1.6.1-6.el8.1 | Routine | 1 | 0 |
| [ELSA-2023-3147](https://patchblox.com/security/data/fix/linux/elsa-2023-3147.md) | May 17, 2023 | ol 9 0:1.6.1-20.el9_2.1 | Routine | 1 | 0 |
| [ALSA-2023:3109](https://patchblox.com/security/data/fix/linux/alsa-2023-3109.md) | May 16, 2023 | almalinux 8 1.6.1-6.el8_8.1 | Routine | 1 | 0 |
| [ALSA-2023:3147](https://patchblox.com/security/data/fix/linux/alsa-2023-3147.md) | May 16, 2023 | almalinux 9 1.6.1-20.el9_2.1 | Routine | 1 | 0 |
| [RHSA-2023:3109](https://patchblox.com/security/data/fix/linux/rhsa-2023-3109.md) | May 16, 2023 | RHEL 8 0:1.6.1-6.el8_8.1 | Routine | 1 | 0 |
| [RHSA-2023:3147](https://patchblox.com/security/data/fix/linux/rhsa-2023-3147.md) | May 16, 2023 | RHEL 9 0:1.6.1-20.el9_2.1 | Routine | 1 | 0 |
| [DSA-5364-1](https://patchblox.com/security/data/fix/linux/dsa-5364-1.md) | Feb 26, 2023 | Debian 11.6 (bullseye) 1.6.1-5+deb11u1 | Routine | 1 | 0 |
| [ALAS2023-2023-066](https://patchblox.com/security/data/fix/linux/alas2023-2023-066.md) | Feb 17, 2023 | amzn 2023 1.6.3-1.amzn2023.0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-25147](https://patchblox.com/security/data/fix/linux/debian-cve-2022-25147.md) | Jan 31, 2023 | Debian 12.15 (bookworm) 1.6.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-25147](https://patchblox.com/security/data/fix/linux/debian-cve-2022-25147.md) | Jan 31, 2023 | Debian 13.5 (trixie) 1.6.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-25147](https://patchblox.com/security/data/fix/linux/debian-cve-2022-25147.md) | Jan 31, 2023 | Debian 14 1.6.3-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
