Packages / Debian 13 (Trixie) / httpd / apache2

Package: apache2 (2.4.68-1~deb13u1)

Apache HTTP Server

Other Packages Related to apache2:

  • dep: [apache2-bin] (= 2.4.68-1~deb13u1)

    Apache HTTP Server (módulos e outros ficheiros binários)

  • dep: [apache2-data] (= 2.4.68-1~deb13u1)

    Apache HTTP Server (ficheiros comuns)

  • dep: [apache2-utils] (= 2.4.68-1~deb13u1)

    Apache HTTP Server (programas utilitários para servidores web)

  • dep: [media-types]

    List of standard media types and their usual file extension

  • dep: [procps]

    /proc file system utilities

  • dep: [perl] [any]

    Practical Extraction and Report Language de Larry Wall

  • rec: [ssl-cert]

    simple debconf wrapper for OpenSSL

  • sug: [apache2-doc]

    Apache HTTP Server (documentação local)

  • sug: [apache2-suexec-pristine]

    Programa suexec padrão do Apache HTTP Server para mod_suexec

  • sug: [apache2-suexec-custom]

    Programa suexec configurável do Apache HTTP Server para mod_suexec

  • sug: [ufw]

    program for managing a Netfilter firewall

  • sug: www-browser

    Package not available

Download apache2

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64225 KiB582 KiBlist of filesDownload
arm64221 KiB579 KiBlist of filesDownload

Caminhos de arquivo do pacote (204)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/apache2/apache2.conf
  • /etc/apache2/conf-available/charset.conf
  • /etc/apache2/conf-available/localized-error-pages.conf
  • /etc/apache2/conf-available/other-vhosts-access-log.conf
  • /etc/apache2/conf-available/security.conf
  • /etc/apache2/conf-available/serve-cgi-bin.conf
  • /etc/apache2/envvars
  • /etc/apache2/magic
  • /etc/apache2/mods-available/access_compat.load
  • /etc/apache2/mods-available/actions.conf
  • /etc/apache2/mods-available/actions.load
  • /etc/apache2/mods-available/alias.conf
  • /etc/apache2/mods-available/alias.load
  • /etc/apache2/mods-available/allowmethods.load
  • /etc/apache2/mods-available/asis.load
  • /etc/apache2/mods-available/auth_basic.load
  • /etc/apache2/mods-available/auth_digest.load
  • /etc/apache2/mods-available/auth_form.load
  • /etc/apache2/mods-available/authn_anon.load
  • /etc/apache2/mods-available/authn_core.load
  • /etc/apache2/mods-available/authn_dbd.load
  • /etc/apache2/mods-available/authn_dbm.load
  • /etc/apache2/mods-available/authn_file.load
  • /etc/apache2/mods-available/authn_socache.load
  • /etc/apache2/mods-available/authnz_fcgi.load
  • /etc/apache2/mods-available/authnz_ldap.load
  • /etc/apache2/mods-available/authz_core.load
  • /etc/apache2/mods-available/authz_dbd.load
  • /etc/apache2/mods-available/authz_dbm.load
  • /etc/apache2/mods-available/authz_groupfile.load
  • /etc/apache2/mods-available/authz_host.load
  • /etc/apache2/mods-available/authz_owner.load
  • /etc/apache2/mods-available/authz_user.load
  • /etc/apache2/mods-available/autoindex.conf
  • /etc/apache2/mods-available/autoindex.load
  • /etc/apache2/mods-available/brotli.load
  • /etc/apache2/mods-available/buffer.load
  • /etc/apache2/mods-available/cache_disk.conf
  • /etc/apache2/mods-available/cache_disk.load
  • /etc/apache2/mods-available/cache.load
  • /etc/apache2/mods-available/cache_socache.load
  • /etc/apache2/mods-available/cern_meta.load
  • /etc/apache2/mods-available/cgid.conf
  • /etc/apache2/mods-available/cgid.load
  • /etc/apache2/mods-available/cgi.load
  • /etc/apache2/mods-available/charset_lite.load
  • /etc/apache2/mods-available/data.load
  • /etc/apache2/mods-available/dav_fs.conf
  • /etc/apache2/mods-available/dav_fs.load
  • /etc/apache2/mods-available/dav.load
  • /etc/apache2/mods-available/dav_lock.load
  • /etc/apache2/mods-available/dbd.load
  • /etc/apache2/mods-available/deflate.conf
  • /etc/apache2/mods-available/deflate.load
  • /etc/apache2/mods-available/dialup.load
  • /etc/apache2/mods-available/dir.conf
  • /etc/apache2/mods-available/dir.load
  • /etc/apache2/mods-available/dump_io.load
  • /etc/apache2/mods-available/echo.load
  • /etc/apache2/mods-available/env.load
  • /etc/apache2/mods-available/expires.load
  • /etc/apache2/mods-available/ext_filter.load
  • /etc/apache2/mods-available/file_cache.load
  • /etc/apache2/mods-available/filter.load
  • /etc/apache2/mods-available/headers.load
  • /etc/apache2/mods-available/heartbeat.load
  • /etc/apache2/mods-available/heartmonitor.load
  • /etc/apache2/mods-available/http2.conf
  • /etc/apache2/mods-available/http2.load
  • /etc/apache2/mods-available/ident.load
  • /etc/apache2/mods-available/imagemap.load
  • /etc/apache2/mods-available/include.load
  • /etc/apache2/mods-available/info.conf
  • /etc/apache2/mods-available/info.load
  • /etc/apache2/mods-available/lbmethod_bybusyness.load
  • /etc/apache2/mods-available/lbmethod_byrequests.load
  • /etc/apache2/mods-available/lbmethod_bytraffic.load
  • /etc/apache2/mods-available/lbmethod_heartbeat.load
  • /etc/apache2/mods-available/ldap.conf
  • /etc/apache2/mods-available/ldap.load
  • /etc/apache2/mods-available/log_debug.load
  • /etc/apache2/mods-available/log_forensic.load
  • /etc/apache2/mods-available/lua.load
  • /etc/apache2/mods-available/macro.load
  • /etc/apache2/mods-available/md.load
  • /etc/apache2/mods-available/mime.conf
  • /etc/apache2/mods-available/mime.load
  • /etc/apache2/mods-available/mime_magic.conf
  • /etc/apache2/mods-available/mime_magic.load
  • /etc/apache2/mods-available/mpm_event.conf
  • /etc/apache2/mods-available/mpm_event.load
  • /etc/apache2/mods-available/mpm_prefork.conf
  • /etc/apache2/mods-available/mpm_prefork.load
  • /etc/apache2/mods-available/mpm_worker.conf
  • /etc/apache2/mods-available/mpm_worker.load
  • /etc/apache2/mods-available/negotiation.conf
  • /etc/apache2/mods-available/negotiation.load
  • /etc/apache2/mods-available/proxy_ajp.load
  • /etc/apache2/mods-available/proxy_balancer.conf
  • /etc/apache2/mods-available/proxy_balancer.load
  • /etc/apache2/mods-available/proxy.conf
  • /etc/apache2/mods-available/proxy_connect.conf
  • /etc/apache2/mods-available/proxy_connect.load
  • /etc/apache2/mods-available/proxy_express.load
  • /etc/apache2/mods-available/proxy_fcgi.load
  • /etc/apache2/mods-available/proxy_fdpass.load
  • /etc/apache2/mods-available/proxy_ftp.conf
  • /etc/apache2/mods-available/proxy_ftp.load
  • /etc/apache2/mods-available/proxy_hcheck.load
  • /etc/apache2/mods-available/proxy_html.conf
  • /etc/apache2/mods-available/proxy_html.load
  • /etc/apache2/mods-available/proxy_http2.load
  • /etc/apache2/mods-available/proxy_http.load
  • /etc/apache2/mods-available/proxy.load
  • /etc/apache2/mods-available/proxy_scgi.load
  • /etc/apache2/mods-available/proxy_uwsgi.load
  • /etc/apache2/mods-available/proxy_wstunnel.load
  • /etc/apache2/mods-available/ratelimit.load
  • /etc/apache2/mods-available/reflector.load
  • /etc/apache2/mods-available/remoteip.load
  • /etc/apache2/mods-available/reqtimeout.conf
  • /etc/apache2/mods-available/reqtimeout.load
  • /etc/apache2/mods-available/request.load
  • /etc/apache2/mods-available/rewrite.load
  • /etc/apache2/mods-available/sed.load
  • /etc/apache2/mods-available/session_cookie.load
  • /etc/apache2/mods-available/session_crypto.load
  • /etc/apache2/mods-available/session_dbd.load
  • /etc/apache2/mods-available/session.load
  • /etc/apache2/mods-available/setenvif.conf
  • /etc/apache2/mods-available/setenvif.load
  • /etc/apache2/mods-available/slotmem_plain.load
  • /etc/apache2/mods-available/slotmem_shm.load
  • /etc/apache2/mods-available/socache_dbm.load
  • /etc/apache2/mods-available/socache_memcache.load
  • /etc/apache2/mods-available/socache_redis.load
  • /etc/apache2/mods-available/socache_shmcb.load
  • /etc/apache2/mods-available/speling.load
  • /etc/apache2/mods-available/ssl.conf
  • /etc/apache2/mods-available/ssl.load
  • /etc/apache2/mods-available/status.conf
  • /etc/apache2/mods-available/status.load
  • /etc/apache2/mods-available/substitute.load
  • /etc/apache2/mods-available/suexec.load
  • /etc/apache2/mods-available/unique_id.load
  • /etc/apache2/mods-available/userdir.conf
  • /etc/apache2/mods-available/userdir.load
  • /etc/apache2/mods-available/usertrack.load
  • /etc/apache2/mods-available/vhost_alias.load
  • /etc/apache2/mods-available/xml2enc.load
  • /etc/apache2/ports.conf
  • /etc/apache2/sites-available/000-default.conf
  • /etc/apache2/sites-available/default-ssl.conf
  • /etc/cron.daily/apache2
  • /etc/default/apache-htcacheclean
  • /etc/init.d/apache2
  • /etc/init.d/apache-htcacheclean
  • /etc/logrotate.d/apache2
  • /etc/ufw/applications.d/apache2-utils.ufw.profile
  • /usr/lib/systemd/system/apache2.service
  • /usr/lib/systemd/system/apache2@.service
  • /usr/lib/systemd/system/apache-htcacheclean.service
  • /usr/lib/systemd/system/apache-htcacheclean@.service
  • /usr/sbin/a2disconf
  • /usr/sbin/a2dismod
  • /usr/sbin/a2dissite
  • /usr/sbin/a2enconf
  • /usr/sbin/a2enmod
  • /usr/sbin/a2ensite
  • /usr/sbin/a2query
  • /usr/sbin/apache2ctl
  • /usr/sbin/apachectl
  • /usr/share/apache2/apache2-maintscript-helper
  • /usr/share/apache2/ask-for-passphrase
  • /usr/share/bash-completion/completions/a2disconf
  • /usr/share/bash-completion/completions/a2dismod
  • /usr/share/bash-completion/completions/a2dissite
  • /usr/share/bash-completion/completions/a2enconf
  • /usr/share/bash-completion/completions/a2enmod
  • /usr/share/bash-completion/completions/a2ensite
  • /usr/share/bug/apache2/control
  • /usr/share/bug/apache2/script
  • /usr/share/doc/apache2/changelog.Debian.gz
  • /usr/share/doc/apache2/changelog.gz
  • /usr/share/doc/apache2/copyright
  • /usr/share/doc/apache2/examples/apache2.monit
  • /usr/share/doc/apache2/examples/secondary-init-script
  • /usr/share/doc/apache2/examples/setup-instance
  • /usr/share/doc/apache2/NEWS.Debian.gz
  • /usr/share/doc/apache2/NOTICE
  • /usr/share/doc/apache2/PACKAGING.gz
  • /usr/share/doc/apache2/README.backtrace
  • /usr/share/doc/apache2/README.Debian.gz
  • /usr/share/doc/apache2/README.multiple-instances
  • /usr/share/lintian/overrides/apache2
  • /usr/share/man/man1/a2query.1.gz
  • /usr/share/man/man8/a2disconf.8.gz
  • /usr/share/man/man8/a2dismod.8.gz
  • /usr/share/man/man8/a2dissite.8.gz
  • /usr/share/man/man8/a2enconf.8.gz
  • /usr/share/man/man8/a2enmod.8.gz
  • /usr/share/man/man8/a2ensite.8.gz
  • /usr/share/man/man8/apache2ctl.8.gz
  • /usr/share/man/man8/apachectl.8.gz

Field source: Debian 13 (Trixie) main amd64

Usar este pacote

O OpenFactory pode iniciar este sistema operacional em uma máquina virtual do navegador, ou começar uma construção que inclui o nome nativo do pacote deste registro.

Experimentar Debian 13 (Trixie) no navegadorConstruir uma imagem que inclui apache2

Versões, suites e repositórios

Cada linha é metadado do índice de pacotes para uma versão, arquitetura, suite e repositório. Nomes, URLs e tamanhos vêm da fonte; um link é um ponto de obtenção mutável, não uma redistribuição da OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.4.68-1~deb13u1trixie / mainamd64Debian 13 · main · amd64223 KiB581 KiBpool/main/a/apache2/apache2_2.4.68-1~deb13u1_amd64.deb
2.4.68-1~deb13u1trixie / mainarm64Debian 13 · main · arm64223 KiB581 KiBpool/main/a/apache2/apache2_2.4.68-1~deb13u1_arm64.deb
2.4.69-1~deb13u1trixie-security / mainamd64Debian 13 security · main · amd64225 KiB582 KiBpool/updates/main/a/apache2/apache2_2.4.69-1~deb13u1_amd64.deb
2.4.67-1~deb13u3trixie-security / mainarm64Debian 13 security · main · arm64221 KiB579 KiBpool/updates/main/a/apache2/apache2_2.4.67-1~deb13u3_arm64.deb
2.4.67-1~deb13u3 (withdrawn)trixie-security / mainamd64Debian 13 security · main · amd64221 KiB579 KiBpool/updates/main/a/apache2/apache2_2.4.67-1~deb13u3_amd64.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilidades conhecidas

A associação de pacotes está em andamento.

CVEGravidadeImpacto por versão
[CVE-2026-63686]

Published:

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido · Corrigida: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

[CVE-2026-93546]

Published:

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property da

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-79768]

Published:

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apac

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73637]

Published:

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via c

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73636]

Published:

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63718]

Published:

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-E

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63292]

Published:

Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execu

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63045]

Published:

Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FT

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59797]

Published:

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59685]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.6

High(7.5)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

[CVE-2026-58415]

Published:

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties

High(8.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-57941]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56154]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56153]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(8.1)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-48005]

Published:

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (f

High(7.5)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-47360]

Published:

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.   When SessionCookieRemove changes across internal redirects, the sessi

High(7.5)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-46729]

Published:

NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(7.5)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42356]

Published:

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a d

Low(3.7)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42528]

Published:

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to v

Medium(4.3)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56449]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68.

High(8.1)Desconhecido
Detalhes (5)

  • 2.4.68-1~deb13u1 · amd64 · trixie

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.67-1~deb13u3 · arm64 · trixie-security

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.69-1~deb13u1 · amd64 · trixie-security

    Desconhecido · Corrigida: 2.4.69-1, 2.4.69-1~deb13u1

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

[Mais resultados]

Última sincronização:

[Catálogo de CVE]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.4.68-1~deb13u1 / amd64Observado Sep 1, 2026sha256 99947e7bcdc1…40306e16Resumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 99947e7bcdc150d1cc4c078051e17a7af53b716a9453d02d43c6e38f40306e16

Verificar download

printf '%s %s\n' '99947e7bcdc150d1cc4c078051e17a7af53b716a9453d02d43c6e38f40306e16' 'apache2_2.4.68-1~deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

2.4.68-1~deb13u1 / arm64Observado Sep 1, 2026sha256 ae29cb0904b7…cf8304daResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): ae29cb0904b79c7b9fa7b730527b42205dcd27a256768ee275ecd5a7cf8304da

Verificar download

printf '%s %s\n' 'ae29cb0904b79c7b9fa7b730527b42205dcd27a256768ee275ecd5a7cf8304da' 'apache2_2.4.68-1~deb13u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

2.4.69-1~deb13u1 / amd64Observado Oct 16, 2026 – Oct 29, 2026sha256 eb8642234bc4…a61974d0Resumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): eb8642234bc497cd83ead6c4a5951cce784da6bd52c8afc6f1f78206a61974d0

Verificar download

printf '%s %s\n' 'eb8642234bc497cd83ead6c4a5951cce784da6bd52c8afc6f1f78206a61974d0' 'apache2_2.4.69-1~deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

2.4.67-1~deb13u3 / arm64Observado Sep 1, 2026sha256 bf0314b0dc24…34af6aebResumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): bf0314b0dc24fe284830d8ff072308603d1c6002cdfb631ba986a18834af6aeb

Verificar download

printf '%s %s\n' 'bf0314b0dc24fe284830d8ff072308603d1c6002cdfb631ba986a18834af6aeb' 'apache2_2.4.67-1~deb13u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

2.4.67-1~deb13u3 / amd64Observado Aug 10, 2026 – Oct 16, 2026sha256 ba7882e4665c…3ec629d3Resumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): ba7882e4665cfb99dc2db1830337fddeac93062e36d41e3fec30864f3ec629d3

Verificar download

printf '%s %s\n' 'ba7882e4665cfb99dc2db1830337fddeac93062e36d41e3fec30864f3ec629d3' 'apache2_2.4.67-1~deb13u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

Fontes

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Evidência de assinatura

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Evidência de assinatura

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Evidência de assinatura

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 29, 2026

    Authoritative source; repository metadata signature verified

    Evidência de assinatura

    trixie-security-main-amd64:00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d

    Repository-signature verification record
    Signed-object SHA-256
    83418b3b53f7e635f6f7b43f15bb1fc89e3b5fd62df5d8db73c7160923d0ffcd
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 29, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
    Observed SHA-256
    00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
    Result
    match verified
  • Debian SecurityOct 16, 2026

    Authoritative source; repository metadata signature verified

    Evidência de assinatura

    trixie-security-main-amd64:ad7b55c827f94b78c9d9eff23cb81865061ed4fba69476fa655443b0054686f1

    Repository-signature verification record
    Signed-object SHA-256
    7dd78765995f679394b1cc1d5dc08afc1ebc9adbf9de364f1a5ec0574576e16b
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 16, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    ad7b55c827f94b78c9d9eff23cb81865061ed4fba69476fa655443b0054686f1
    Observed SHA-256
    ad7b55c827f94b78c9d9eff23cb81865061ed4fba69476fa655443b0054686f1
    Result
    match verified