-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 Nov 2026 13:54:19 +0100 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-data apache2-dev apache2-doc apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym Architecture: source amd64 all Version: 2.4.71-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Closes: 1153732 Changes: apache2 (2.4.71-1~deb13u1) trixie-security; urgency=medium . * New upstream release (Closes: #1153732, CVE-2026-119618, CVE-2026-106023, CVE-2026-109163) * Unfuzz patches Checksums-Sha1: 6f13268899f87f1dc8f4fd3dbb7fd8be147fea6f 3529 apache2_2.4.71-1~deb13u1.dsc c15f13977dc05303a3a05c6d22e4c650a84bac03 10963450 apache2_2.4.71.orig.tar.gz a16aaff7390fc15353750663787929961d47b6a0 870 apache2_2.4.71.orig.tar.gz.asc ec04f4439a031224ace676e3394de78c9c43119c 828388 apache2_2.4.71-1~deb13u1.debian.tar.xz 25da9eaf5e1b1c96c5738424d23e6d216147aef3 3804616 apache2-bin-dbgsym_2.4.71-1~deb13u1_amd64.deb 4791e9a2cc4e075fa2643524110790014d54b246 1419548 apache2-bin_2.4.71-1~deb13u1_amd64.deb f38c24c3f3e6153a9f7a58b88615d37bc75f80e5 159936 apache2-data_2.4.71-1~deb13u1_all.deb 823d5929edc0b9157e6d3bfd65111e6a5bc5235a 330036 apache2-dev_2.4.71-1~deb13u1_amd64.deb 5d7dc05c9ab9fe3720803ebb74309f1b29a09b3f 4430696 apache2-doc_2.4.71-1~deb13u1_all.deb b2d2160ffa74f9aa3e2a1cc5a8890c37d3490989 3140 apache2-ssl-dev_2.4.71-1~deb13u1_amd64.deb 67db8165f22cb81124887e993cdc89b45d89be42 12360 apache2-suexec-custom-dbgsym_2.4.71-1~deb13u1_amd64.deb d82cde4b544c18707f059a2ba47cd04f389ef764 158412 apache2-suexec-custom_2.4.71-1~deb13u1_amd64.deb d8dbd756d6f4a63dccb9d976db1f408183972e52 11068 apache2-suexec-pristine-dbgsym_2.4.71-1~deb13u1_amd64.deb fcff94a670351ff28736f375d1dd9c07a9cdc74e 156900 apache2-suexec-pristine_2.4.71-1~deb13u1_amd64.deb 99c689a513f7fdf1bdf69e49f4518b9b45419a70 116008 apache2-utils-dbgsym_2.4.71-1~deb13u1_amd64.deb 0689fd60367832cce575911ebd0bac9f73e729df 224848 apache2-utils_2.4.71-1~deb13u1_amd64.deb c56ae7779f625cb9a4f27547b5d2a2203b5ffa5c 12926 apache2_2.4.71-1~deb13u1_amd64.buildinfo ac8cf8eb18ee016115819203cd5f9b45012d8029 233000 apache2_2.4.71-1~deb13u1_amd64.deb Checksums-Sha256: 52111fcd6bc7d1fcdfd05a02967c93a0246c3028b757aa2364ed0fbd301a3346 3529 apache2_2.4.71-1~deb13u1.dsc 6b0433674ded858d2ac01e95345935ce127d5d287471762f0a7f10f4969cbfe8 10963450 apache2_2.4.71.orig.tar.gz 229a6dc396d7a3ac492a420dee81104c50b9c41e325e62317601509fd532935b 870 apache2_2.4.71.orig.tar.gz.asc 34c3637ea40e71b7a0b22be0851cf0085afb386f8417c841a07de72179191360 828388 apache2_2.4.71-1~deb13u1.debian.tar.xz da4ab3bf6be9fcd68bfdaace347cb9375616a2aa9af2c48110ac00b2f23dbec1 3804616 apache2-bin-dbgsym_2.4.71-1~deb13u1_amd64.deb 463c795e3f51f4a1ced24f1324a6d189b18bbdaa64c9acaffec1e66b31da8187 1419548 apache2-bin_2.4.71-1~deb13u1_amd64.deb d6bf05512842d31a2160fa95b01492aaf154f866228d8d1d085029c7a4d23ad6 159936 apache2-data_2.4.71-1~deb13u1_all.deb df6fe92c43c6105954b058616c82bb0bf216566ccada35291b78cdff513c91b0 330036 apache2-dev_2.4.71-1~deb13u1_amd64.deb 2cbaee6226612d5c92504c8f0c025b30032b389153257c26c1cf75e3a9cc96f7 4430696 apache2-doc_2.4.71-1~deb13u1_all.deb 36ce663b2d1551a6b39366dbcfbfefa9df2b06163f37e39556dfe83e8a2ba8bb 3140 apache2-ssl-dev_2.4.71-1~deb13u1_amd64.deb d4859aa4300620dd895b19870ea11525a03790577c2c21a8becb92f46cfc5cb2 12360 apache2-suexec-custom-dbgsym_2.4.71-1~deb13u1_amd64.deb 89d07ac92a4c8a3a002572493dc425aeae654c54e5c4fc9c0cd1a2eae874c36a 158412 apache2-suexec-custom_2.4.71-1~deb13u1_amd64.deb 1a3e671fbf70021115c19911132e2dcf45d6aa7e4ef2362802662e995857a76c 11068 apache2-suexec-pristine-dbgsym_2.4.71-1~deb13u1_amd64.deb b4902ab05c44a9cb53638ba3c98d651dbbcc841b8b2d670065cd82b91b39f280 156900 apache2-suexec-pristine_2.4.71-1~deb13u1_amd64.deb 75097eb7e0856d3dbf6aae9876e296b58ae10b301c6b166e2e67bc8fd5690f69 116008 apache2-utils-dbgsym_2.4.71-1~deb13u1_amd64.deb 731f62a235177c6bfff4d499bfa4d37d3376c2bf1bbd2e4cc0a85c0da026fb01 224848 apache2-utils_2.4.71-1~deb13u1_amd64.deb 9363bec4855c8907379cfc14d774ba2f23a49d57755ee66899fbd9a9e818391a 12926 apache2_2.4.71-1~deb13u1_amd64.buildinfo 739cd4bc1d822eb7f296f353158db53af59fa07d043f9fbaa7eedb06cf1a5224 233000 apache2_2.4.71-1~deb13u1_amd64.deb Files: 44e7f9be89cda1233d77f3d9ea353a15 3529 httpd optional apache2_2.4.71-1~deb13u1.dsc d1e259552d25d0f7b5cd1486ba0f6c6e 10963450 httpd optional apache2_2.4.71.orig.tar.gz 8c6e31a58205344e91208ec9482db5e9 870 httpd optional apache2_2.4.71.orig.tar.gz.asc e727fbec64f826dbd53703ac4407e49e 828388 httpd optional apache2_2.4.71-1~deb13u1.debian.tar.xz c079081c088b45b43c3e0b5afc5b996b 3804616 debug optional apache2-bin-dbgsym_2.4.71-1~deb13u1_amd64.deb 823874d4c5b9d6d779cb5e3f8945bc33 1419548 httpd optional apache2-bin_2.4.71-1~deb13u1_amd64.deb 41a264a0e538b5368b8aa0d71cc71f04 159936 httpd optional apache2-data_2.4.71-1~deb13u1_all.deb 0cc9bddd2158044022e774d880256817 330036 httpd optional apache2-dev_2.4.71-1~deb13u1_amd64.deb 011de634912f27afb12c2e228a671714 4430696 doc optional apache2-doc_2.4.71-1~deb13u1_all.deb 8902e14d529af8cba00396d6f223e3d3 3140 httpd optional apache2-ssl-dev_2.4.71-1~deb13u1_amd64.deb 67118551914a2d1cce4fa977ae9a8227 12360 debug optional apache2-suexec-custom-dbgsym_2.4.71-1~deb13u1_amd64.deb 6b492608acb0fc92c5c5654b96c4e819 158412 httpd optional apache2-suexec-custom_2.4.71-1~deb13u1_amd64.deb 7ad7e5a0077126bfa3755b33ae1e96c2 11068 debug optional apache2-suexec-pristine-dbgsym_2.4.71-1~deb13u1_amd64.deb a6963905d6a6220e1744f153a35ea7ce 156900 httpd optional apache2-suexec-pristine_2.4.71-1~deb13u1_amd64.deb 1657a2b06a9369cc4271dd4467501ffb 116008 debug optional apache2-utils-dbgsym_2.4.71-1~deb13u1_amd64.deb 1d77af60e940a3b62c4008e6c89962aa 224848 httpd optional apache2-utils_2.4.71-1~deb13u1_amd64.deb 01ee0f36d93f487bba7111f87f0c39c4 12926 httpd optional apache2_2.4.71-1~deb13u1_amd64.buildinfo 529d0920dd56278b287351cb9c8d9f38 233000 httpd optional apache2_2.4.71-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmr1c+AACgkQ9tdMp8mZ 7uldkxAAgx5JxicYFHldjUltxo2/0r2ntT5Slf479LgVlt2+iXP9f4yaFJQO9nuL VG9QaiB/y1oX0VWgN+Zk4OOdE7Uoc+qdj2npP2//JAQzOY30wwO+Rhyomj2/qK7Z mxA5C22uhGLPORybafGwsKzcXgEuUWkkNoq4n7MiujcV7aO0Onba0a6sOjpsPBbk VYNAls/aLSvox6xntluBc2vZAyvc65vwgj6x93NGUspKZq9jqekamSacKMApAOH0 H3kSv3WAbgd0N6xj/PybukwE1GQcuD4BG43wAczvTNakDO6O3ov30f8WWCbwSDzL Z9ZiX+shTwqC/tt+3VZo48yXF+h7eX31up/QGAfFNz5OclNJSb4km+5pOvdpKEWI hPYc52oNPE+QLg+E+a+E75mv265Cs8LVuc+XYyc6G8fL595BvIr+qt7Q+D7WKwRD TOdlfFAfSMyrNb70KS93QYEq+AgPk3Cqx2Wnf8wUY1XMIkKxhrpU+YhhAf/1o0bn Fd4Yt8fTo4+zWlCMxCpWhuKZKFcsyGKFG2+7nHw8z3rUiKGh42y3feLCrC6AJ2ZY 1eE7glRz8hdqUXkUepqIQTgJgyInREzIsaSX60OyTiOuDvpmLgPpYXHKUG/t2KnN V14rARrDnpsiX/MSnzLxLxFShC659yddc5b8h5DGFoSCI+ayouo= =8xfM -----END PGP SIGNATURE-----