Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
72b5b148 by Salvatore Bonaccorso at 2026-10-01T20:52:49+02:00
Update status for apache2 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,63 +1,83 @@
CVE-2026-42356
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42356
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/863594b37381151c397b9fbc609170d026411614
CVE-2026-42528
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42528
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/a653b98099ced413982ddad6f9416e54292f4656
CVE-2026-46729
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-46729
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/7b12a7936ec439b3e1f5fc36cfacf5b915eb652c
CVE-2026-47360
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-47360
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/cb5163f30dd0d6bc921eeac96415a381f153ac3a
CVE-2026-48005
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-48005
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-56153
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56153
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/6654234dcb395e07fd62255670356f84ec733195
CVE-2026-56154
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56154
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/6e4d1e614597109909dda495d235b6a1331d7beb
CVE-2026-56449
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56449
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/c721d4e1cf5c142149509490015cef1a75715595
CVE-2026-57941
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-57941
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/d072ed8f06d66a30072227d61a2fc04ad9ae5c99
CVE-2026-58415
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-58415
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/5a00f76e12c5e1e477e902b44b42b94d9bc571ed
CVE-2026-59685
- - apache2 <unfixed>
+ - apache2 <not-affected> (Oonly affects Apache on Windows)
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59685
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/7d158df34d07b53c010ff54bfa182a76f9fab672
CVE-2026-59797
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59797
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/1ee1c1fef2511454461b6770b204c4934a6495d8
CVE-2026-63045
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63045
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/c0a3e5cbcb245022d08e490f98153f90120363ed
CVE-2026-63292
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63292
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/7ed3f91688b7a1e1ac48486fd2e5eeb2932e879f
CVE-2026-63686
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63686
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/6fa059e4a270e0a66dd398e96875df86abff3a75
CVE-2026-63718
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63718
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/7c32a06bc504875544185c27cfbc6d8dc257c941
CVE-2026-73636
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73636
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-73637
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73637
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-79768
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-79768
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/dce2ddbca79be74e7bcb7b8cc7a3a291cf4e9588
CVE-2026-93546
- apache2 <unfixed>
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-93546
+ NOTE: Fixed by:
https://github.com/apache/httpd/commit/fa8c354189597453b2c8b38e081efa9b723abd3c
CVE-2026-102505
- libimager-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43998313/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/72b5b14899ae4ba0f5afc205bd56a7f74debfd7e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/72b5b14899ae4ba0f5afc205bd56a7f74debfd7e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
