Packages / Debian 12 (Bookworm) / httpd / apache2-bin

Package: apache2-bin (2.4.68-1~deb12u1)

Apache HTTP Server (módulos e outros ficheiros binários)

Other Packages Related to apache2-bin:

  • dep: [perl] [any]

    Practical Extraction and Report Language de Larry Wall

  • dep: [libapr1] (>= 1.7.0)

    Apache Portable Runtime Library

  • dep: [libaprutil1] (>= 1.6.0)

    Biblioteca de utilitários do Apache Portable Runtime

  • dep: [libaprutil1-dbd-sqlite3]

    Apache Portable Runtime Utility Library - driver SQLite3

  • dep: [libaprutil1-dbd-mysql]

    Apache Portable Runtime Utility Library - driver MySQL

  • dep: [libaprutil1-dbd-odbc]

    Apache Portable Runtime Utility Library - driver ODBC

  • dep: [libaprutil1-dbd-pgsql]

    Apache Portable Runtime Utility Library - driver PostgreSQL

  • dep: libaprutil1-dbd-freetds

    Package not available

  • dep: [libaprutil1-ldap]

    Biblioteca de utilitários Apache Portable Runtime - driver LDAP

  • dep: [libbrotli1] (>= 0.6.0)

    library implementing brotli encoder and decoder (shared libraries)

  • dep: [libc6] (>= 2.36)

    GNU C Library: Shared libraries

  • dep: [libcrypt1] (>= 1:4.1.0)

    libcrypt shared library

  • dep: [libcurl4] (>= 7.28.0)

    biblioteca de transferência de URL do lado do cliente fácil de usar (variante OpenSSL)

  • dep: [libjansson4] (>= 2.14)

    C library for encoding, decoding and manipulating JSON data

  • dep: [libldap-2.5-0] (>= 2.5.4)

    Bibliotecas OpenLDAP

  • dep: [liblua5.3-0]

    Shared library for the Lua interpreter version 5.3

  • dep: [libnghttp2-14] (>= 1.50.0)

    biblioteca que implementa o protocolo HTTP/2 (biblioteca partilhada)

  • dep: [libpcre2-8-0] (>= 10.22)

    New Perl Compatible Regular Expression Library- 8 bit runtime files

  • dep: [libssl3] (>= 3.0.0)

    kit de ferramentas Secure Sockets Layer - bibliotecas partilhadas

  • dep: [libxml2] (>= 2.7.4)

    biblioteca XML do GNOME

  • dep: [zlib1g] (>= 1:1.1.4)

    compression library - runtime

  • sug: [apache2-doc]

    Apache HTTP Server (documentação local)

  • sug: [apache2-suexec-pristine]

    Programa suexec padrão do Apache HTTP Server para mod_suexec

  • sug: [apache2-suexec-custom]

    Programa suexec configurável do Apache HTTP Server para mod_suexec

  • sug: www-browser

    Package not available

Download apache2-bin

ArchitecturePackage sizeInstalled sizeFilesPackage
amd641.3 MiB5.0 MiBlist of filesDownload
arm641.2 MiB9.9 MiBlist of filesDownload

Caminhos de arquivo do pacote (129)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/apache2/modules/httpd.exp
  • /usr/lib/apache2/modules/mod_access_compat.so
  • /usr/lib/apache2/modules/mod_actions.so
  • /usr/lib/apache2/modules/mod_alias.so
  • /usr/lib/apache2/modules/mod_allowmethods.so
  • /usr/lib/apache2/modules/mod_asis.so
  • /usr/lib/apache2/modules/mod_auth_basic.so
  • /usr/lib/apache2/modules/mod_auth_digest.so
  • /usr/lib/apache2/modules/mod_auth_form.so
  • /usr/lib/apache2/modules/mod_authn_anon.so
  • /usr/lib/apache2/modules/mod_authn_core.so
  • /usr/lib/apache2/modules/mod_authn_dbd.so
  • /usr/lib/apache2/modules/mod_authn_dbm.so
  • /usr/lib/apache2/modules/mod_authn_file.so
  • /usr/lib/apache2/modules/mod_authn_socache.so
  • /usr/lib/apache2/modules/mod_authnz_fcgi.so
  • /usr/lib/apache2/modules/mod_authnz_ldap.so
  • /usr/lib/apache2/modules/mod_authz_core.so
  • /usr/lib/apache2/modules/mod_authz_dbd.so
  • /usr/lib/apache2/modules/mod_authz_dbm.so
  • /usr/lib/apache2/modules/mod_authz_groupfile.so
  • /usr/lib/apache2/modules/mod_authz_host.so
  • /usr/lib/apache2/modules/mod_authz_owner.so
  • /usr/lib/apache2/modules/mod_authz_user.so
  • /usr/lib/apache2/modules/mod_autoindex.so
  • /usr/lib/apache2/modules/mod_brotli.so
  • /usr/lib/apache2/modules/mod_bucketeer.so
  • /usr/lib/apache2/modules/mod_buffer.so
  • /usr/lib/apache2/modules/mod_cache_disk.so
  • /usr/lib/apache2/modules/mod_cache.so
  • /usr/lib/apache2/modules/mod_cache_socache.so
  • /usr/lib/apache2/modules/mod_case_filter_in.so
  • /usr/lib/apache2/modules/mod_case_filter.so
  • /usr/lib/apache2/modules/mod_cern_meta.so
  • /usr/lib/apache2/modules/mod_cgid.so
  • /usr/lib/apache2/modules/mod_cgi.so
  • /usr/lib/apache2/modules/mod_charset_lite.so
  • /usr/lib/apache2/modules/mod_data.so
  • /usr/lib/apache2/modules/mod_dav_fs.so
  • /usr/lib/apache2/modules/mod_dav_lock.so
  • /usr/lib/apache2/modules/mod_dav.so
  • /usr/lib/apache2/modules/mod_dbd.so
  • /usr/lib/apache2/modules/mod_deflate.so
  • /usr/lib/apache2/modules/mod_dialup.so
  • /usr/lib/apache2/modules/mod_dir.so
  • /usr/lib/apache2/modules/mod_dumpio.so
  • /usr/lib/apache2/modules/mod_echo.so
  • /usr/lib/apache2/modules/mod_env.so
  • /usr/lib/apache2/modules/mod_expires.so
  • /usr/lib/apache2/modules/mod_ext_filter.so
  • /usr/lib/apache2/modules/mod_file_cache.so
  • /usr/lib/apache2/modules/mod_filter.so
  • /usr/lib/apache2/modules/mod_headers.so
  • /usr/lib/apache2/modules/mod_heartbeat.so
  • /usr/lib/apache2/modules/mod_heartmonitor.so
  • /usr/lib/apache2/modules/mod_http2.so
  • /usr/lib/apache2/modules/mod_ident.so
  • /usr/lib/apache2/modules/mod_imagemap.so
  • /usr/lib/apache2/modules/mod_include.so
  • /usr/lib/apache2/modules/mod_info.so
  • /usr/lib/apache2/modules/mod_lbmethod_bybusyness.so
  • /usr/lib/apache2/modules/mod_lbmethod_byrequests.so
  • /usr/lib/apache2/modules/mod_lbmethod_bytraffic.so
  • /usr/lib/apache2/modules/mod_lbmethod_heartbeat.so
  • /usr/lib/apache2/modules/mod_ldap.so
  • /usr/lib/apache2/modules/mod_log_debug.so
  • /usr/lib/apache2/modules/mod_log_forensic.so
  • /usr/lib/apache2/modules/mod_lua.so
  • /usr/lib/apache2/modules/mod_macro.so
  • /usr/lib/apache2/modules/mod_md.so
  • /usr/lib/apache2/modules/mod_mime_magic.so
  • /usr/lib/apache2/modules/mod_mime.so
  • /usr/lib/apache2/modules/mod_mpm_event.so
  • /usr/lib/apache2/modules/mod_mpm_prefork.so
  • /usr/lib/apache2/modules/mod_mpm_worker.so
  • /usr/lib/apache2/modules/mod_negotiation.so
  • /usr/lib/apache2/modules/mod_proxy_ajp.so
  • /usr/lib/apache2/modules/mod_proxy_balancer.so
  • /usr/lib/apache2/modules/mod_proxy_connect.so
  • /usr/lib/apache2/modules/mod_proxy_express.so
  • /usr/lib/apache2/modules/mod_proxy_fcgi.so
  • /usr/lib/apache2/modules/mod_proxy_fdpass.so
  • /usr/lib/apache2/modules/mod_proxy_ftp.so
  • /usr/lib/apache2/modules/mod_proxy_hcheck.so
  • /usr/lib/apache2/modules/mod_proxy_html.so
  • /usr/lib/apache2/modules/mod_proxy_http2.so
  • /usr/lib/apache2/modules/mod_proxy_http.so
  • /usr/lib/apache2/modules/mod_proxy_scgi.so
  • /usr/lib/apache2/modules/mod_proxy.so
  • /usr/lib/apache2/modules/mod_proxy_uwsgi.so
  • /usr/lib/apache2/modules/mod_proxy_wstunnel.so
  • /usr/lib/apache2/modules/mod_ratelimit.so
  • /usr/lib/apache2/modules/mod_reflector.so
  • /usr/lib/apache2/modules/mod_remoteip.so
  • /usr/lib/apache2/modules/mod_reqtimeout.so
  • /usr/lib/apache2/modules/mod_request.so
  • /usr/lib/apache2/modules/mod_rewrite.so
  • /usr/lib/apache2/modules/mod_sed.so
  • /usr/lib/apache2/modules/mod_session_cookie.so
  • /usr/lib/apache2/modules/mod_session_crypto.so
  • /usr/lib/apache2/modules/mod_session_dbd.so
  • /usr/lib/apache2/modules/mod_session.so
  • /usr/lib/apache2/modules/mod_setenvif.so
  • /usr/lib/apache2/modules/mod_slotmem_plain.so
  • /usr/lib/apache2/modules/mod_slotmem_shm.so
  • /usr/lib/apache2/modules/mod_socache_dbm.so
  • /usr/lib/apache2/modules/mod_socache_memcache.so
  • /usr/lib/apache2/modules/mod_socache_redis.so
  • /usr/lib/apache2/modules/mod_socache_shmcb.so
  • /usr/lib/apache2/modules/mod_speling.so
  • /usr/lib/apache2/modules/mod_ssl.so
  • /usr/lib/apache2/modules/mod_status.so
  • /usr/lib/apache2/modules/mod_substitute.so
  • /usr/lib/apache2/modules/mod_suexec.so
  • /usr/lib/apache2/modules/mod_unique_id.so
  • /usr/lib/apache2/modules/mod_userdir.so
  • /usr/lib/apache2/modules/mod_usertrack.so
  • /usr/lib/apache2/modules/mod_vhost_alias.so
  • /usr/lib/apache2/modules/mod_xml2enc.so
  • /usr/sbin/apache2
  • /usr/share/bug/apache2-bin/control
  • /usr/share/bug/apache2-bin/script
  • /usr/share/doc/apache2-bin/changelog.Debian.gz
  • /usr/share/doc/apache2-bin/changelog.gz
  • /usr/share/doc/apache2-bin/copyright
  • /usr/share/doc/apache2-bin/NEWS.Debian.gz
  • /usr/share/doc/apache2-bin/NOTICE
  • /usr/share/lintian/overrides/apache2-bin
  • /usr/share/man/man8/apache2.8.gz

Field source: Debian 12 (Bookworm) main amd64

Usar este pacote

O OpenFactory pode iniciar este sistema operacional em uma máquina virtual do navegador, ou começar uma construção que inclui o nome nativo do pacote deste registro.

Versões, suites e repositórios

Cada linha é metadado do índice de pacotes para uma versão, arquitetura, suite e repositório. Nomes, URLs e tamanhos vêm da fonte; um link é um ponto de obtenção mutável, não uma redistribuição da OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.4.68-1~deb12u1bookworm / mainamd64Debian 12 · main · amd641.3 MiB5.0 MiBpool/main/a/apache2/apache2-bin_2.4.68-1~deb12u1_amd64.deb
2.4.68-1~deb12u1bookworm / mainarm64Debian 12 · main · arm641.2 MiB9.9 MiBpool/main/a/apache2/apache2-bin_2.4.68-1~deb12u1_arm64.deb
2.4.67-1~deb12u3bookworm-security / mainamd64Debian 12 security · main · amd641.3 MiB5.0 MiBpool/updates/main/a/apache2/apache2-bin_2.4.67-1~deb12u3_amd64.deb
2.4.67-1~deb12u3bookworm-security / mainarm64Debian 12 security · main · arm641.2 MiB9.9 MiBpool/updates/main/a/apache2/apache2-bin_2.4.67-1~deb12u3_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilidades conhecidas

A associação de pacotes está em andamento.

CVEGravidadeImpacto por versão
[CVE-2026-63686]

Published:

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

[CVE-2026-93546]

Published:

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property da

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-79768]

Published:

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apac

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73637]

Published:

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via c

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73636]

Published:

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63718]

Published:

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-E

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63292]

Published:

Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execu

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63045]

Published:

Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FT

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59797]

Published:

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59685]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.6

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

[CVE-2026-58415]

Published:

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties

High(8.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-57941]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56154]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56153]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(8.1)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-48005]

Published:

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (f

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-47360]

Published:

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.   When SessionCookieRemove changes across internal redirects, the sessi

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-46729]

Published:

NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(7.5)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42356]

Published:

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a d

Low(3.7)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42528]

Published:

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to v

Medium(4.3)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56449]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68.

High(8.1)Desconhecido
Detalhes (4)
  • 2.4.68-1~deb12u1 · amd64 · bookworm

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.68-1~deb12u1 · arm64 · bookworm

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · amd64 · bookworm-security

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb12u3 · arm64 · bookworm-security

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

[Mais resultados]

Última sincronização:

[Catálogo de CVE]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.4.68-1~deb12u1 / amd64Observado Sep 1, 2026sha256 6efbe766ef28…93a9149aResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 6efbe766ef282a10fedb1ea559f092cffa257cb542dc2e7a9d8e6e9193a9149a

Verificar download

printf '%s %s\n' '6efbe766ef282a10fedb1ea559f092cffa257cb542dc2e7a9d8e6e9193a9149a' 'apache2-bin_2.4.68-1~deb12u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

2.4.68-1~deb12u1 / arm64Observado Sep 1, 2026sha256 4a0b6dc29978…50da42abResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 4a0b6dc299783ec37966c7c17a08ba1d9ceff47f33563f83275025f750da42ab

Verificar download

printf '%s %s\n' '4a0b6dc299783ec37966c7c17a08ba1d9ceff47f33563f83275025f750da42ab' 'apache2-bin_2.4.68-1~deb12u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

2.4.67-1~deb12u3 / amd64Observado Sep 1, 2026sha256 e5035727e9ae…75539478Resumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): e5035727e9aeefe550787c53d854af7960047193eb7f92f3f0430a6175539478

Verificar download

printf '%s %s\n' 'e5035727e9aeefe550787c53d854af7960047193eb7f92f3f0430a6175539478' 'apache2-bin_2.4.67-1~deb12u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main amd64

2.4.67-1~deb12u3 / arm64Observado Sep 1, 2026sha256 86662e2b560d…f9cd0913Resumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 86662e2b560d5abef42fb4900b04565f1175df6b48107a04910a3508f9cd0913

Verificar download

printf '%s %s\n' '86662e2b560d5abef42fb4900b04565f1175df6b48107a04910a3508f9cd0913' 'apache2-bin_2.4.67-1~deb12u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main arm64

Fontes

  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified