update apr-util to 1.6.4 Update apr-util from 1.6.3 to 1.6.4. This is a security update fixing five CVEs: - CVE-2026-34502: heap buffer overflow in APR memcached client - CVE-2026-34501: heap buffer overflow in APR redis client - CVE-2026-34191: SQL injection in apr_dbd_oracle - CVE-2026-32327: stack recursion crash in apr_xml_quote_elem() - CVE-2025-49506: timing attack in apr_password_validate() Also add sw64 architecture support (cherry-picked from 000721ea) and set the License field to the SPDX identifier Apache-2.0. Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com>