Packages / Debian 13 (Trixie) / httpd / apache2

Package: apache2 (2.4.68-1~deb13u1)

Apache HTTP Server

Other Packages Related to apache2:

  • dep: [apache2-bin] (= 2.4.68-1~deb13u1)

    Apache HTTP Server (модулі та інші двійкові файли)

  • dep: [apache2-data] (= 2.4.68-1~deb13u1)

    Apache HTTP Server (спільні файли)

  • dep: [apache2-utils] (= 2.4.68-1~deb13u1)

    Apache HTTP Server (допоміжні програми для вебсерверів)

  • dep: [media-types]

    List of standard media types and their usual file extension

  • dep: [procps]

    /proc file system utilities

  • dep: [perl] [any]

    Practical Extraction and Report Language Ларрі Волла

  • rec: [ssl-cert]

    simple debconf wrapper for OpenSSL

  • sug: [apache2-doc]

    Apache HTTP Server (локальна документація)

  • sug: [apache2-suexec-pristine]

    Стандартна програма suexec Apache HTTP Server для mod_suexec

  • sug: [apache2-suexec-custom]

    Налаштовувана програма suexec Apache HTTP Server для mod_suexec

  • sug: [ufw]

    program for managing a Netfilter firewall

  • sug: www-browser

    Package not available

Download apache2

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64223 KiB581 KiBlist of filesDownload
arm64223 KiB581 KiBlist of filesDownload

Шляхи файлів пакета (204)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/apache2/apache2.conf
  • /etc/apache2/conf-available/charset.conf
  • /etc/apache2/conf-available/localized-error-pages.conf
  • /etc/apache2/conf-available/other-vhosts-access-log.conf
  • /etc/apache2/conf-available/security.conf
  • /etc/apache2/conf-available/serve-cgi-bin.conf
  • /etc/apache2/envvars
  • /etc/apache2/magic
  • /etc/apache2/mods-available/access_compat.load
  • /etc/apache2/mods-available/actions.conf
  • /etc/apache2/mods-available/actions.load
  • /etc/apache2/mods-available/alias.conf
  • /etc/apache2/mods-available/alias.load
  • /etc/apache2/mods-available/allowmethods.load
  • /etc/apache2/mods-available/asis.load
  • /etc/apache2/mods-available/auth_basic.load
  • /etc/apache2/mods-available/auth_digest.load
  • /etc/apache2/mods-available/auth_form.load
  • /etc/apache2/mods-available/authn_anon.load
  • /etc/apache2/mods-available/authn_core.load
  • /etc/apache2/mods-available/authn_dbd.load
  • /etc/apache2/mods-available/authn_dbm.load
  • /etc/apache2/mods-available/authn_file.load
  • /etc/apache2/mods-available/authn_socache.load
  • /etc/apache2/mods-available/authnz_fcgi.load
  • /etc/apache2/mods-available/authnz_ldap.load
  • /etc/apache2/mods-available/authz_core.load
  • /etc/apache2/mods-available/authz_dbd.load
  • /etc/apache2/mods-available/authz_dbm.load
  • /etc/apache2/mods-available/authz_groupfile.load
  • /etc/apache2/mods-available/authz_host.load
  • /etc/apache2/mods-available/authz_owner.load
  • /etc/apache2/mods-available/authz_user.load
  • /etc/apache2/mods-available/autoindex.conf
  • /etc/apache2/mods-available/autoindex.load
  • /etc/apache2/mods-available/brotli.load
  • /etc/apache2/mods-available/buffer.load
  • /etc/apache2/mods-available/cache_disk.conf
  • /etc/apache2/mods-available/cache_disk.load
  • /etc/apache2/mods-available/cache.load
  • /etc/apache2/mods-available/cache_socache.load
  • /etc/apache2/mods-available/cern_meta.load
  • /etc/apache2/mods-available/cgid.conf
  • /etc/apache2/mods-available/cgid.load
  • /etc/apache2/mods-available/cgi.load
  • /etc/apache2/mods-available/charset_lite.load
  • /etc/apache2/mods-available/data.load
  • /etc/apache2/mods-available/dav_fs.conf
  • /etc/apache2/mods-available/dav_fs.load
  • /etc/apache2/mods-available/dav.load
  • /etc/apache2/mods-available/dav_lock.load
  • /etc/apache2/mods-available/dbd.load
  • /etc/apache2/mods-available/deflate.conf
  • /etc/apache2/mods-available/deflate.load
  • /etc/apache2/mods-available/dialup.load
  • /etc/apache2/mods-available/dir.conf
  • /etc/apache2/mods-available/dir.load
  • /etc/apache2/mods-available/dump_io.load
  • /etc/apache2/mods-available/echo.load
  • /etc/apache2/mods-available/env.load
  • /etc/apache2/mods-available/expires.load
  • /etc/apache2/mods-available/ext_filter.load
  • /etc/apache2/mods-available/file_cache.load
  • /etc/apache2/mods-available/filter.load
  • /etc/apache2/mods-available/headers.load
  • /etc/apache2/mods-available/heartbeat.load
  • /etc/apache2/mods-available/heartmonitor.load
  • /etc/apache2/mods-available/http2.conf
  • /etc/apache2/mods-available/http2.load
  • /etc/apache2/mods-available/ident.load
  • /etc/apache2/mods-available/imagemap.load
  • /etc/apache2/mods-available/include.load
  • /etc/apache2/mods-available/info.conf
  • /etc/apache2/mods-available/info.load
  • /etc/apache2/mods-available/lbmethod_bybusyness.load
  • /etc/apache2/mods-available/lbmethod_byrequests.load
  • /etc/apache2/mods-available/lbmethod_bytraffic.load
  • /etc/apache2/mods-available/lbmethod_heartbeat.load
  • /etc/apache2/mods-available/ldap.conf
  • /etc/apache2/mods-available/ldap.load
  • /etc/apache2/mods-available/log_debug.load
  • /etc/apache2/mods-available/log_forensic.load
  • /etc/apache2/mods-available/lua.load
  • /etc/apache2/mods-available/macro.load
  • /etc/apache2/mods-available/md.load
  • /etc/apache2/mods-available/mime.conf
  • /etc/apache2/mods-available/mime.load
  • /etc/apache2/mods-available/mime_magic.conf
  • /etc/apache2/mods-available/mime_magic.load
  • /etc/apache2/mods-available/mpm_event.conf
  • /etc/apache2/mods-available/mpm_event.load
  • /etc/apache2/mods-available/mpm_prefork.conf
  • /etc/apache2/mods-available/mpm_prefork.load
  • /etc/apache2/mods-available/mpm_worker.conf
  • /etc/apache2/mods-available/mpm_worker.load
  • /etc/apache2/mods-available/negotiation.conf
  • /etc/apache2/mods-available/negotiation.load
  • /etc/apache2/mods-available/proxy_ajp.load
  • /etc/apache2/mods-available/proxy_balancer.conf
  • /etc/apache2/mods-available/proxy_balancer.load
  • /etc/apache2/mods-available/proxy.conf
  • /etc/apache2/mods-available/proxy_connect.conf
  • /etc/apache2/mods-available/proxy_connect.load
  • /etc/apache2/mods-available/proxy_express.load
  • /etc/apache2/mods-available/proxy_fcgi.load
  • /etc/apache2/mods-available/proxy_fdpass.load
  • /etc/apache2/mods-available/proxy_ftp.conf
  • /etc/apache2/mods-available/proxy_ftp.load
  • /etc/apache2/mods-available/proxy_hcheck.load
  • /etc/apache2/mods-available/proxy_html.conf
  • /etc/apache2/mods-available/proxy_html.load
  • /etc/apache2/mods-available/proxy_http2.load
  • /etc/apache2/mods-available/proxy_http.load
  • /etc/apache2/mods-available/proxy.load
  • /etc/apache2/mods-available/proxy_scgi.load
  • /etc/apache2/mods-available/proxy_uwsgi.load
  • /etc/apache2/mods-available/proxy_wstunnel.load
  • /etc/apache2/mods-available/ratelimit.load
  • /etc/apache2/mods-available/reflector.load
  • /etc/apache2/mods-available/remoteip.load
  • /etc/apache2/mods-available/reqtimeout.conf
  • /etc/apache2/mods-available/reqtimeout.load
  • /etc/apache2/mods-available/request.load
  • /etc/apache2/mods-available/rewrite.load
  • /etc/apache2/mods-available/sed.load
  • /etc/apache2/mods-available/session_cookie.load
  • /etc/apache2/mods-available/session_crypto.load
  • /etc/apache2/mods-available/session_dbd.load
  • /etc/apache2/mods-available/session.load
  • /etc/apache2/mods-available/setenvif.conf
  • /etc/apache2/mods-available/setenvif.load
  • /etc/apache2/mods-available/slotmem_plain.load
  • /etc/apache2/mods-available/slotmem_shm.load
  • /etc/apache2/mods-available/socache_dbm.load
  • /etc/apache2/mods-available/socache_memcache.load
  • /etc/apache2/mods-available/socache_redis.load
  • /etc/apache2/mods-available/socache_shmcb.load
  • /etc/apache2/mods-available/speling.load
  • /etc/apache2/mods-available/ssl.conf
  • /etc/apache2/mods-available/ssl.load
  • /etc/apache2/mods-available/status.conf
  • /etc/apache2/mods-available/status.load
  • /etc/apache2/mods-available/substitute.load
  • /etc/apache2/mods-available/suexec.load
  • /etc/apache2/mods-available/unique_id.load
  • /etc/apache2/mods-available/userdir.conf
  • /etc/apache2/mods-available/userdir.load
  • /etc/apache2/mods-available/usertrack.load
  • /etc/apache2/mods-available/vhost_alias.load
  • /etc/apache2/mods-available/xml2enc.load
  • /etc/apache2/ports.conf
  • /etc/apache2/sites-available/000-default.conf
  • /etc/apache2/sites-available/default-ssl.conf
  • /etc/cron.daily/apache2
  • /etc/default/apache-htcacheclean
  • /etc/init.d/apache2
  • /etc/init.d/apache-htcacheclean
  • /etc/logrotate.d/apache2
  • /etc/ufw/applications.d/apache2-utils.ufw.profile
  • /usr/lib/systemd/system/apache2.service
  • /usr/lib/systemd/system/apache2@.service
  • /usr/lib/systemd/system/apache-htcacheclean.service
  • /usr/lib/systemd/system/apache-htcacheclean@.service
  • /usr/sbin/a2disconf
  • /usr/sbin/a2dismod
  • /usr/sbin/a2dissite
  • /usr/sbin/a2enconf
  • /usr/sbin/a2enmod
  • /usr/sbin/a2ensite
  • /usr/sbin/a2query
  • /usr/sbin/apache2ctl
  • /usr/sbin/apachectl
  • /usr/share/apache2/apache2-maintscript-helper
  • /usr/share/apache2/ask-for-passphrase
  • /usr/share/bash-completion/completions/a2disconf
  • /usr/share/bash-completion/completions/a2dismod
  • /usr/share/bash-completion/completions/a2dissite
  • /usr/share/bash-completion/completions/a2enconf
  • /usr/share/bash-completion/completions/a2enmod
  • /usr/share/bash-completion/completions/a2ensite
  • /usr/share/bug/apache2/control
  • /usr/share/bug/apache2/script
  • /usr/share/doc/apache2/changelog.Debian.gz
  • /usr/share/doc/apache2/changelog.gz
  • /usr/share/doc/apache2/copyright
  • /usr/share/doc/apache2/examples/apache2.monit
  • /usr/share/doc/apache2/examples/secondary-init-script
  • /usr/share/doc/apache2/examples/setup-instance
  • /usr/share/doc/apache2/NEWS.Debian.gz
  • /usr/share/doc/apache2/NOTICE
  • /usr/share/doc/apache2/PACKAGING.gz
  • /usr/share/doc/apache2/README.backtrace
  • /usr/share/doc/apache2/README.Debian.gz
  • /usr/share/doc/apache2/README.multiple-instances
  • /usr/share/lintian/overrides/apache2
  • /usr/share/man/man1/a2query.1.gz
  • /usr/share/man/man8/a2disconf.8.gz
  • /usr/share/man/man8/a2dismod.8.gz
  • /usr/share/man/man8/a2dissite.8.gz
  • /usr/share/man/man8/a2enconf.8.gz
  • /usr/share/man/man8/a2enmod.8.gz
  • /usr/share/man/man8/a2ensite.8.gz
  • /usr/share/man/man8/apache2ctl.8.gz
  • /usr/share/man/man8/apachectl.8.gz

Field source: Debian 13 (Trixie) main amd64

Використати цей пакет

OpenFactory може завантажити цю операційну систему у віртуальній машині браузера або почати збірку образу з рідною назвою пакета з цього запису.

Версії, набори та репозиторії

Кожен рядок: метадані індексу пакетів для однієї версії, архітектури, набору й репозиторію. Назви, URL і розміри зі джерела; посилання є змінним місцем отримання, не перерозповсюдженням OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.4.68-1~deb13u1trixie / mainamd64Debian 13 · main · amd64223 KiB581 KiBpool/main/a/apache2/apache2_2.4.68-1~deb13u1_amd64.deb
2.4.68-1~deb13u1trixie / mainarm64Debian 13 · main · arm64223 KiB581 KiBpool/main/a/apache2/apache2_2.4.68-1~deb13u1_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Відомі вразливості

Зіставлення пакетів триває.

CVEКритичністьВплив на версії
[CVE-2026-63686]

Published:

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо · Виправлена: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо · Виправлена: 2.4.18-2ubuntu3.17+esm22, 2.4.29-1ubuntu4.27+esm13, 2.4.41-4ubuntu3.23+esm9, 2.4.52-1ubuntu4.25, 2.4.58-1ubuntu8.17, 2.4.66-2ubuntu2.6, 2.4.7-1ubuntu4.22+esm17

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2

[CVE-2026-93546]

Published:

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property da

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-79768]

Published:

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apac

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73637]

Published:

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via c

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-73636]

Published:

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63718]

Published:

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-E

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63292]

Published:

Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execu

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-63045]

Published:

Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FT

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59797]

Published:

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-59685]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.6

High(7.5)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm; pypi · apache2 · debian · 12; pypi · apache2 · debian · 13; pypi · apache2 · debian · 14

[CVE-2026-58415]

Published:

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties

High(8.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-57941]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56154]

Published:

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Critical(9.8)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56153]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(8.1)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-48005]

Published:

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (f

High(7.5)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-47360]

Published:

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.   When SessionCookieRemove changes across internal redirects, the sessi

High(7.5)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-46729]

Published:

NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

High(7.5)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42356]

Published:

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a d

Low(3.7)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-42528]

Published:

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to v

Medium(4.3)Невідомо
Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Невідомо

    Version impact unknown

    nvd · apache2 · debian · bookworm

[CVE-2026-56449]

Published:

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68.

High(8.1)Невідомо

Зіставлення пакетів триває. Спостережено:

Подробиці (2)
  • 2.4.68-1~deb13u1 · amd64 · trixie

    Уражена · Виправлена: 2.4.69-1~deb13u1

    nvd · apache2 · debian · 13

  • 2.4.68-1~deb13u1 · arm64 · trixie

    Уражена · Виправлена: 2.4.69-1~deb13u1

    nvd · apache2 · debian · 13

[Наступні результати]

Остання синхронізація:

[Каталог CVE]

Контрольні суми

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.4.68-1~deb13u1 / amd64Спостережено Sep 1, 2026sha256 99947e7bcdc1…40306e16Контрольна сума джерела

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Контрольна сума джерела (sha256): 99947e7bcdc150d1cc4c078051e17a7af53b716a9453d02d43c6e38f40306e16

Перевірити завантаження

printf '%s %s\n' '99947e7bcdc150d1cc4c078051e17a7af53b716a9453d02d43c6e38f40306e16' 'apache2_2.4.68-1~deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

2.4.68-1~deb13u1 / arm64Спостережено Sep 1, 2026sha256 ae29cb0904b7…cf8304daКонтрольна сума джерела

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Контрольна сума джерела (sha256): ae29cb0904b79c7b9fa7b730527b42205dcd27a256768ee275ecd5a7cf8304da

Перевірити завантаження

printf '%s %s\n' 'ae29cb0904b79c7b9fa7b730527b42205dcd27a256768ee275ecd5a7cf8304da' 'apache2_2.4.68-1~deb13u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Джерела

  • Authoritative source; repository metadata signature verified

    Доказ підпису

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Доказ підпису

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Доказ підпису

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 29, 2026

    Authoritative source; repository metadata signature verified

    Доказ підпису

    trixie-security-main-amd64:00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d

    Repository-signature verification record
    Signed-object SHA-256
    3fb26940f9e9c1b15e724fe78dba57182518d4b1a72a0d2372fc7829a4252268
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 29, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
    Observed SHA-256
    00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
    Result
    match verified
  • Debian SecurityOct 16, 2026

    Authoritative source; repository metadata signature verified

    Доказ підпису

    trixie-security-main-amd64:ad7b55c827f94b78c9d9eff23cb81865061ed4fba69476fa655443b0054686f1

    Repository-signature verification record
    Signed-object SHA-256
    7dd78765995f679394b1cc1d5dc08afc1ebc9adbf9de364f1a5ec0574576e16b
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 16, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    ad7b55c827f94b78c9d9eff23cb81865061ed4fba69476fa655443b0054686f1
    Observed SHA-256
    ad7b55c827f94b78c9d9eff23cb81865061ed4fba69476fa655443b0054686f1
    Result
    match verified