Debian Linux Security Advisory 5370-1 - Ronald Crane discovered that missing input saniting in the apr_encode functions of apr, the Apache Portable Runtime library, may result in denial of service or potentially the execution of arbitrary code.
06258aeb56f6c7338c9fdd57a615e5a5d0b7d38557dfd44abd33e40b95560519