Packages / Debian 12 (Bookworm) / httpd / apache2

Package: apache2 (2.4.68-1~deb12u1)

Apache HTTP Server

Other Packages Related to apache2:

  • dep: [apache2-bin] (= 2.4.68-1~deb12u1)

    Apache HTTP Server (módulos e outros ficheiros binários)

  • dep: [apache2-data] (= 2.4.68-1~deb12u1)

    Apache HTTP Server (ficheiros comuns)

  • dep: [apache2-utils] (= 2.4.68-1~deb12u1)

    Apache HTTP Server (programas utilitários para servidores web)

  • dep: [lsb-base]

    transitional package for Linux Standard Base init script functionality

  • dep: [media-types]

    List of standard media types and their usual file extension

  • dep: [perl] [any]

    Practical Extraction and Report Language de Larry Wall

  • dep: [procps]

    /proc file system utilities

  • rec: [ssl-cert]

    simple debconf wrapper for OpenSSL

  • sug: [apache2-doc]

    Apache HTTP Server (documentação local)

  • sug: [apache2-suexec-pristine]

    Programa suexec padrão do Apache HTTP Server para mod_suexec

  • sug: [apache2-suexec-custom]

    Programa suexec configurável do Apache HTTP Server para mod_suexec

  • sug: www-browser

    Package not available

Download apache2

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64226 KiB582 KiBlist of filesDownload
arm64226 KiB582 KiBlist of filesDownload

Caminhos de arquivo do pacote (202)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/apache2/apache2.conf
  • /etc/apache2/conf-available/charset.conf
  • /etc/apache2/conf-available/localized-error-pages.conf
  • /etc/apache2/conf-available/other-vhosts-access-log.conf
  • /etc/apache2/conf-available/security.conf
  • /etc/apache2/conf-available/serve-cgi-bin.conf
  • /etc/apache2/envvars
  • /etc/apache2/magic
  • /etc/apache2/mods-available/access_compat.load
  • /etc/apache2/mods-available/actions.conf
  • /etc/apache2/mods-available/actions.load
  • /etc/apache2/mods-available/alias.conf
  • /etc/apache2/mods-available/alias.load
  • /etc/apache2/mods-available/allowmethods.load
  • /etc/apache2/mods-available/asis.load
  • /etc/apache2/mods-available/auth_basic.load
  • /etc/apache2/mods-available/auth_digest.load
  • /etc/apache2/mods-available/auth_form.load
  • /etc/apache2/mods-available/authn_anon.load
  • /etc/apache2/mods-available/authn_core.load
  • /etc/apache2/mods-available/authn_dbd.load
  • /etc/apache2/mods-available/authn_dbm.load
  • /etc/apache2/mods-available/authn_file.load
  • /etc/apache2/mods-available/authn_socache.load
  • /etc/apache2/mods-available/authnz_fcgi.load
  • /etc/apache2/mods-available/authnz_ldap.load
  • /etc/apache2/mods-available/authz_core.load
  • /etc/apache2/mods-available/authz_dbd.load
  • /etc/apache2/mods-available/authz_dbm.load
  • /etc/apache2/mods-available/authz_groupfile.load
  • /etc/apache2/mods-available/authz_host.load
  • /etc/apache2/mods-available/authz_owner.load
  • /etc/apache2/mods-available/authz_user.load
  • /etc/apache2/mods-available/autoindex.conf
  • /etc/apache2/mods-available/autoindex.load
  • /etc/apache2/mods-available/brotli.load
  • /etc/apache2/mods-available/buffer.load
  • /etc/apache2/mods-available/cache_disk.conf
  • /etc/apache2/mods-available/cache_disk.load
  • /etc/apache2/mods-available/cache.load
  • /etc/apache2/mods-available/cache_socache.load
  • /etc/apache2/mods-available/cern_meta.load
  • /etc/apache2/mods-available/cgid.conf
  • /etc/apache2/mods-available/cgid.load
  • /etc/apache2/mods-available/cgi.load
  • /etc/apache2/mods-available/charset_lite.load
  • /etc/apache2/mods-available/data.load
  • /etc/apache2/mods-available/dav_fs.conf
  • /etc/apache2/mods-available/dav_fs.load
  • /etc/apache2/mods-available/dav.load
  • /etc/apache2/mods-available/dav_lock.load
  • /etc/apache2/mods-available/dbd.load
  • /etc/apache2/mods-available/deflate.conf
  • /etc/apache2/mods-available/deflate.load
  • /etc/apache2/mods-available/dialup.load
  • /etc/apache2/mods-available/dir.conf
  • /etc/apache2/mods-available/dir.load
  • /etc/apache2/mods-available/dump_io.load
  • /etc/apache2/mods-available/echo.load
  • /etc/apache2/mods-available/env.load
  • /etc/apache2/mods-available/expires.load
  • /etc/apache2/mods-available/ext_filter.load
  • /etc/apache2/mods-available/file_cache.load
  • /etc/apache2/mods-available/filter.load
  • /etc/apache2/mods-available/headers.load
  • /etc/apache2/mods-available/heartbeat.load
  • /etc/apache2/mods-available/heartmonitor.load
  • /etc/apache2/mods-available/http2.conf
  • /etc/apache2/mods-available/http2.load
  • /etc/apache2/mods-available/ident.load
  • /etc/apache2/mods-available/imagemap.load
  • /etc/apache2/mods-available/include.load
  • /etc/apache2/mods-available/info.conf
  • /etc/apache2/mods-available/info.load
  • /etc/apache2/mods-available/lbmethod_bybusyness.load
  • /etc/apache2/mods-available/lbmethod_byrequests.load
  • /etc/apache2/mods-available/lbmethod_bytraffic.load
  • /etc/apache2/mods-available/lbmethod_heartbeat.load
  • /etc/apache2/mods-available/ldap.conf
  • /etc/apache2/mods-available/ldap.load
  • /etc/apache2/mods-available/log_debug.load
  • /etc/apache2/mods-available/log_forensic.load
  • /etc/apache2/mods-available/lua.load
  • /etc/apache2/mods-available/macro.load
  • /etc/apache2/mods-available/md.load
  • /etc/apache2/mods-available/mime.conf
  • /etc/apache2/mods-available/mime.load
  • /etc/apache2/mods-available/mime_magic.conf
  • /etc/apache2/mods-available/mime_magic.load
  • /etc/apache2/mods-available/mpm_event.conf
  • /etc/apache2/mods-available/mpm_event.load
  • /etc/apache2/mods-available/mpm_prefork.conf
  • /etc/apache2/mods-available/mpm_prefork.load
  • /etc/apache2/mods-available/mpm_worker.conf
  • /etc/apache2/mods-available/mpm_worker.load
  • /etc/apache2/mods-available/negotiation.conf
  • /etc/apache2/mods-available/negotiation.load
  • /etc/apache2/mods-available/proxy_ajp.load
  • /etc/apache2/mods-available/proxy_balancer.conf
  • /etc/apache2/mods-available/proxy_balancer.load
  • /etc/apache2/mods-available/proxy.conf
  • /etc/apache2/mods-available/proxy_connect.load
  • /etc/apache2/mods-available/proxy_express.load
  • /etc/apache2/mods-available/proxy_fcgi.load
  • /etc/apache2/mods-available/proxy_fdpass.load
  • /etc/apache2/mods-available/proxy_ftp.conf
  • /etc/apache2/mods-available/proxy_ftp.load
  • /etc/apache2/mods-available/proxy_hcheck.load
  • /etc/apache2/mods-available/proxy_html.conf
  • /etc/apache2/mods-available/proxy_html.load
  • /etc/apache2/mods-available/proxy_http2.load
  • /etc/apache2/mods-available/proxy_http.load
  • /etc/apache2/mods-available/proxy.load
  • /etc/apache2/mods-available/proxy_scgi.load
  • /etc/apache2/mods-available/proxy_uwsgi.load
  • /etc/apache2/mods-available/proxy_wstunnel.load
  • /etc/apache2/mods-available/ratelimit.load
  • /etc/apache2/mods-available/reflector.load
  • /etc/apache2/mods-available/remoteip.load
  • /etc/apache2/mods-available/reqtimeout.conf
  • /etc/apache2/mods-available/reqtimeout.load
  • /etc/apache2/mods-available/request.load
  • /etc/apache2/mods-available/rewrite.load
  • /etc/apache2/mods-available/sed.load
  • /etc/apache2/mods-available/session_cookie.load
  • /etc/apache2/mods-available/session_crypto.load
  • /etc/apache2/mods-available/session_dbd.load
  • /etc/apache2/mods-available/session.load
  • /etc/apache2/mods-available/setenvif.conf
  • /etc/apache2/mods-available/setenvif.load
  • /etc/apache2/mods-available/slotmem_plain.load
  • /etc/apache2/mods-available/slotmem_shm.load
  • /etc/apache2/mods-available/socache_dbm.load
  • /etc/apache2/mods-available/socache_memcache.load
  • /etc/apache2/mods-available/socache_redis.load
  • /etc/apache2/mods-available/socache_shmcb.load
  • /etc/apache2/mods-available/speling.load
  • /etc/apache2/mods-available/ssl.conf
  • /etc/apache2/mods-available/ssl.load
  • /etc/apache2/mods-available/status.conf
  • /etc/apache2/mods-available/status.load
  • /etc/apache2/mods-available/substitute.load
  • /etc/apache2/mods-available/suexec.load
  • /etc/apache2/mods-available/unique_id.load
  • /etc/apache2/mods-available/userdir.conf
  • /etc/apache2/mods-available/userdir.load
  • /etc/apache2/mods-available/usertrack.load
  • /etc/apache2/mods-available/vhost_alias.load
  • /etc/apache2/mods-available/xml2enc.load
  • /etc/apache2/ports.conf
  • /etc/apache2/sites-available/000-default.conf
  • /etc/apache2/sites-available/default-ssl.conf
  • /etc/cron.daily/apache2
  • /etc/default/apache-htcacheclean
  • /etc/init.d/apache2
  • /etc/init.d/apache-htcacheclean
  • /etc/logrotate.d/apache2
  • /lib/systemd/system/apache2.service
  • /lib/systemd/system/apache2@.service
  • /lib/systemd/system/apache-htcacheclean.service
  • /lib/systemd/system/apache-htcacheclean@.service
  • /usr/sbin/a2disconf
  • /usr/sbin/a2dismod
  • /usr/sbin/a2dissite
  • /usr/sbin/a2enconf
  • /usr/sbin/a2enmod
  • /usr/sbin/a2ensite
  • /usr/sbin/a2query
  • /usr/sbin/apache2ctl
  • /usr/sbin/apachectl
  • /usr/share/apache2/apache2-maintscript-helper
  • /usr/share/apache2/ask-for-passphrase
  • /usr/share/bash-completion/completions/a2disconf
  • /usr/share/bash-completion/completions/a2dismod
  • /usr/share/bash-completion/completions/a2dissite
  • /usr/share/bash-completion/completions/a2enconf
  • /usr/share/bash-completion/completions/a2enmod
  • /usr/share/bash-completion/completions/a2ensite
  • /usr/share/bug/apache2/control
  • /usr/share/bug/apache2/script
  • /usr/share/doc/apache2/changelog.Debian.gz
  • /usr/share/doc/apache2/changelog.gz
  • /usr/share/doc/apache2/copyright
  • /usr/share/doc/apache2/examples/apache2.monit
  • /usr/share/doc/apache2/examples/secondary-init-script
  • /usr/share/doc/apache2/examples/setup-instance
  • /usr/share/doc/apache2/NEWS.Debian.gz
  • /usr/share/doc/apache2/NOTICE
  • /usr/share/doc/apache2/PACKAGING.gz
  • /usr/share/doc/apache2/README.backtrace
  • /usr/share/doc/apache2/README.Debian.gz
  • /usr/share/doc/apache2/README.multiple-instances
  • /usr/share/lintian/overrides/apache2
  • /usr/share/man/man1/a2query.1.gz
  • /usr/share/man/man8/a2disconf.8.gz
  • /usr/share/man/man8/a2dismod.8.gz
  • /usr/share/man/man8/a2dissite.8.gz
  • /usr/share/man/man8/a2enconf.8.gz
  • /usr/share/man/man8/a2enmod.8.gz
  • /usr/share/man/man8/a2ensite.8.gz
  • /usr/share/man/man8/apache2ctl.8.gz
  • /usr/share/man/man8/apachectl.8.gz

Field source: Debian 12 (Bookworm) main amd64

Usar este pacote

O OpenFactory pode iniciar este sistema operacional em uma máquina virtual do navegador, ou começar uma construção que inclui o nome nativo do pacote deste registro.

Versões, suites e repositórios

Cada linha é metadado do índice de pacotes para uma versão, arquitetura, suite e repositório. Nomes, URLs e tamanhos vêm da fonte; um link é um ponto de obtenção mutável, não uma redistribuição da OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.4.68-1~deb12u1bookworm / mainamd64Debian 12 · main · amd64227 KiB584 KiBpool/main/a/apache2/apache2_2.4.68-1~deb12u1_amd64.deb
2.4.68-1~deb12u1bookworm / mainarm64Debian 12 · main · arm64227 KiB584 KiBpool/main/a/apache2/apache2_2.4.68-1~deb12u1_arm64.deb
2.4.67-1~deb12u3bookworm-security / mainamd64Debian 12 security · main · amd64226 KiB582 KiBpool/updates/main/a/apache2/apache2_2.4.67-1~deb12u3_amd64.deb
2.4.67-1~deb12u3bookworm-security / mainarm64Debian 12 security · main · arm64226 KiB582 KiBpool/updates/main/a/apache2/apache2_2.4.67-1~deb12u3_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilidades conhecidas

A associação de pacotes está em andamento.

CVEGravidadeImpacto por versão
[CVE-2026-63686]

Published:

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

[CVE-2026-93546]

Published:

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property da

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-79768]

Published:

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apac

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73637]

Published:

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via c

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73636]

Published:

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63718]

Published:

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-E

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63292]

Published:

Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execu

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63045]

Published:

Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FT

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59797]

Published:

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59685]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.6

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

[CVE-2026-58415]

Published:

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-57941]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56154]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56153]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(8.1)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-48005]

Published:

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (f

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-47360]

Published:

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.   When SessionCookieRemove changes across internal redirects, the sessi

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-46729]

Published:

NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42356]

Published:

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a d

Low(3.7)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42528]

Published:

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to v

Medium(4.3)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56449]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68.

High(8.1)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

[Mais resultados]

Última sincronização:

[Catálogo de CVE]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.4.68-1~deb12u1 / amd64Observado Sep 1, 2026sha256 ca8babe84699…0e64ef1bResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): ca8babe84699e445ba399235fe10cb8f9935565ab6b73fbce1fdaa2a0e64ef1b

Verificar download

printf '%s %s\n' 'ca8babe84699e445ba399235fe10cb8f9935565ab6b73fbce1fdaa2a0e64ef1b' 'apache2_2.4.68-1~deb12u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

2.4.68-1~deb12u1 / arm64Observado Sep 1, 2026sha256 3612bf0124a7…125cb7afResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 3612bf0124a7ba0ed62252c0129c1b7dd1bd0209a9b6452fc07d05b1125cb7af

Verificar download

printf '%s %s\n' '3612bf0124a7ba0ed62252c0129c1b7dd1bd0209a9b6452fc07d05b1125cb7af' 'apache2_2.4.68-1~deb12u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

2.4.67-1~deb12u3 / amd64Observado Sep 1, 2026sha256 1fffd7c6f68f…eb9f289bResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 1fffd7c6f68f82e47d20607254fe9fb9a1fec463475e981a4a50d652eb9f289b

Verificar download

printf '%s %s\n' '1fffd7c6f68f82e47d20607254fe9fb9a1fec463475e981a4a50d652eb9f289b' 'apache2_2.4.67-1~deb12u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main amd64

2.4.67-1~deb12u3 / arm64Observado Sep 1, 2026sha256 5c7863e55533…49dc4bfeResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 5c7863e55533a1b3a6936a51801c34168f82e63a6ec02a30ff8d261b49dc4bfe

Verificar download

printf '%s %s\n' '5c7863e55533a1b3a6936a51801c34168f82e63a6ec02a30ff8d261b49dc4bfe' 'apache2_2.4.67-1~deb12u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main arm64

Fontes

  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified