Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
66c67b3e by Salvatore Bonaccorso at 2026-10-01T23:01:59+02:00
Track fixes for apache2 via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -500,43 +500,43 @@ CVE-2024-58388 (Sharp (and Toshiba Tec rebranded)
multifunction printers contain
CVE-2023-54404 (Zod schema-validation library through 4.6.5 contains an
uncontrolled r ...)
NOT-FOR-US: Zod
CVE-2026-42356 (Deployment of wrong handler vulnerability in Apache HTTP
Server allows ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42356
NOTE: Fixed by:
https://github.com/apache/httpd/commit/863594b37381151c397b9fbc609170d026411614
CVE-2026-42528 (A memory calculation bug in mod_dav in Apache httpd 2.4.67 and
earlier ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42528
NOTE: Fixed by:
https://github.com/apache/httpd/commit/a653b98099ced413982ddad6f9416e54292f4656
CVE-2026-46729 (NULL Pointer Dereference vulnerability in Apache HTTP Servers
mod_hear ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-46729
NOTE: Fixed by:
https://github.com/apache/httpd/commit/7b12a7936ec439b3e1f5fc36cfacf5b915eb652c
CVE-2026-47360 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-47360
NOTE: Fixed by:
https://github.com/apache/httpd/commit/cb5163f30dd0d6bc921eeac96415a381f153ac3a
CVE-2026-48005 (Missing authentication checks in mod_auth_digest in Apache
Software Fo ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-48005
NOTE: Fixed by:
https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-56153 (Out-of-bounds Write vulnerability in Apache HTTP Server's
mod_charset_ ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56153
NOTE: Fixed by:
https://github.com/apache/httpd/commit/6654234dcb395e07fd62255670356f84ec733195
CVE-2026-56154 (Use After Free vulnerability in Apache HTTP Server's
mod_rewrite when ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56154
NOTE: Fixed by:
https://github.com/apache/httpd/commit/6e4d1e614597109909dda495d235b6a1331d7beb
CVE-2026-56449 (Out-of-bounds Write vulnerability in Apache HTTP Server's
mod_proxy_ht ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56449
NOTE: Fixed by:
https://github.com/apache/httpd/commit/c721d4e1cf5c142149509490015cef1a75715595
CVE-2026-57941 (Use After Free vulnerability in Apache HTTP Server's
mod_http2via shar ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-57941
NOTE: Fixed by:
https://github.com/apache/httpd/commit/d072ed8f06d66a30072227d61a2fc04ad9ae5c99
CVE-2026-58415 (Internal state files accessible to external parties in
mod_dav_fs in A ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-58415
NOTE: Fixed by:
https://github.com/apache/httpd/commit/5a00f76e12c5e1e477e902b44b42b94d9bc571ed
CVE-2026-59685 (Out-of-bounds Write vulnerability in Apache HTTP Server on
Windows whi ...)
@@ -544,39 +544,39 @@ CVE-2026-59685 (Out-of-bounds Write vulnerability in
Apache HTTP Server on Windo
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59685
NOTE: Fixed by:
https://github.com/apache/httpd/commit/7d158df34d07b53c010ff54bfa182a76f9fab672
CVE-2026-59797 (Improper Privilege Management vulnerability in Apache HTTP
Server's mo ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59797
NOTE: Fixed by:
https://github.com/apache/httpd/commit/1ee1c1fef2511454461b6770b204c4934a6495d8
CVE-2026-63045 (Improper validation of FTP PASV reply address in mod_proxy_ftp
in Apac ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63045
NOTE: Fixed by:
https://github.com/apache/httpd/commit/c0a3e5cbcb245022d08e490f98153f90120363ed
CVE-2026-63292 (Stack-based buffer overflow in mod_vhost_alias in Apache
Software Foun ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63292
NOTE: Fixed by:
https://github.com/apache/httpd/commit/7ed3f91688b7a1e1ac48486fd2e5eeb2932e879f
CVE-2026-63686 (A NULL pointer dereference in mod_xml2enc in Apache Software
Foundatio ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63686
NOTE: Fixed by:
https://github.com/apache/httpd/commit/6fa059e4a270e0a66dd398e96875df86abff3a75
CVE-2026-63718 (Inconsistent Interpretation of HTTP Requests ('HTTP
Request/Response S ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63718
NOTE: Fixed by:
https://github.com/apache/httpd/commit/7c32a06bc504875544185c27cfbc6d8dc257c941
CVE-2026-73636 (Authentication bypass by capture-replay in mod_auth_digest in
Apache S ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73636
NOTE: Fixed by:
https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-73637 (Use after free in mod_auth_digest in Apache Software
Foundation Apache ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73637
NOTE: Fixed by:
https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
CVE-2026-79768 (Path equivalence: '/./' (single dot directory) vulnerability
in Apache ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-79768
NOTE: Fixed by:
https://github.com/apache/httpd/commit/dce2ddbca79be74e7bcb7b8cc7a3a291cf4e9588
CVE-2026-93546 (Integer overflow in mod_dav_fs in Apache HTTP Server through
2.4.68 al ...)
- - apache2 <unfixed>
+ - apache2 2.4.69-1
NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-93546
NOTE: Fixed by:
https://github.com/apache/httpd/commit/fa8c354189597453b2c8b38e081efa9b723abd3c
CVE-2026-102505 (Imager versions before 1.037 for Perl overflow a heap buffer
fetching ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66c67b3ef1ebdd97edfe0cdfba41bfd74d9f5e6b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66c67b3ef1ebdd97edfe0cdfba41bfd74d9f5e6b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
