Debian Linux Security Advisory 2237-2 – The recent APR update DSA-2237-1 introduced a regression that could lead to an endless loop in the apr_fnmatch() function, causing a denial of service. This update fixes this problem.
Source: Debian Security Advisory 2237-2
