Version 2.17-9 of libapreq2 is marked for autoremoval from testing on Sat 11 Jul 2026. It is affected by #1139634. The removal of libapreq2 will also cause the removal of (transitive) reverse dependencies: libapache2-authcassimple-perl, libapache2-sitecontrol-perl. You should try to prevent the removal by fixing these RC bugs.
CVE-2022-22728:
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
This package has been
orphaned. This means that it does not have a real
maintainer at the moment. Please consider adopting this package
if you are interested in it. Please see bug number #1051034 for more information.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/liba/libapreq2.png){kind=link}