-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 12 Nov 2026 09:58:41 +0100 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-data apache2-dev apache2-doc apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: source amd64 all Version: 2.4.71-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Closes: 1153732 Changes: apache2 (2.4.71-1~deb12u1) bookworm-security; urgency=medium . * New upstream release (Closes: #1153732, CVE-2026-119618, CVE-2026-106023, CVE-2026-109163, CVE-2026-42356, CVE-2026-42528, CVE-2026-46729, CVE-2026-47360, CVE-2026-48005, CVE-2026-56153, CVE-2026-56154, CVE-2026-56449, CVE-2026-57941, CVE-2026-58415, CVE-2026-59685, CVE-2026-59797, CVE-2026-63045, CVE-2026-63292, CVE-2026-63686, CVE-2026-63718, CVE-2026-73636, CVE-2026-73637, CVE-2026-79768, CVE-2026-93546) * Unfuzz patches Checksums-Sha1: 731a94880f934a2938f4459419dc8b1b148b457f 3315 apache2_2.4.71-1~deb12u1.dsc c15f13977dc05303a3a05c6d22e4c650a84bac03 10963450 apache2_2.4.71.orig.tar.gz 3e3ddd91d06ddbd7734600881cd31ece7924f698 824856 apache2_2.4.71-1~deb12u1.debian.tar.xz 02c9d51ed6d08e998e74f69897ca3006b1dc52c1 3770816 apache2-bin-dbgsym_2.4.71-1~deb12u1_amd64.deb 84f71080b95d2d16f4384fca09d6c380c867f763 1409916 apache2-bin_2.4.71-1~deb12u1_amd64.deb 5c1b9e035967ca876da34da0fe1b7fbc849aec0b 159880 apache2-data_2.4.71-1~deb12u1_all.deb b51c79db048f40d4006f1255927f1a2adea77434 329928 apache2-dev_2.4.71-1~deb12u1_amd64.deb b18349a6d03450b89c388a3709dee51eb11ba046 4429560 apache2-doc_2.4.71-1~deb12u1_all.deb 7ed7cf55602eacea1a1300cba656d497fe5943d6 3140 apache2-ssl-dev_2.4.71-1~deb12u1_amd64.deb 6e8a6b782f935e7d2b37571e3a9e4d690e6cc3c3 12388 apache2-suexec-custom-dbgsym_2.4.71-1~deb12u1_amd64.deb 48754af40c5e97b12a3d29b517ee94295a3e476c 157292 apache2-suexec-custom_2.4.71-1~deb12u1_amd64.deb b6013aa46eff4df7fb8681e6f2ebfe574a20e2e0 11212 apache2-suexec-pristine-dbgsym_2.4.71-1~deb12u1_amd64.deb 7cae0ff6592f2768dcaa4c7e93fea9ec3755ecb3 155772 apache2-suexec-pristine_2.4.71-1~deb12u1_amd64.deb ea029708bfffbb34ce2fb069ea6a233e67dc22c2 115828 apache2-utils-dbgsym_2.4.71-1~deb12u1_amd64.deb e72b65d6382e5c0b8f7fe88d15ca47a1ac34037d 223608 apache2-utils_2.4.71-1~deb12u1_amd64.deb 17f0976bb878bfdbb10c105a0cfaae8fd89c0011 12922 apache2_2.4.71-1~deb12u1_amd64.buildinfo d708dc712ecdaed766e0811dee60a45659b1a65e 237772 apache2_2.4.71-1~deb12u1_amd64.deb 8d5cdfad197edc94a782f510d2ef346fa1e1b195 956 libapache2-mod-md_2.4.71-1~deb12u1_amd64.deb c47b87c430738585d6b55c925c3b2c55ed04a5ef 1132 libapache2-mod-proxy-uwsgi_2.4.71-1~deb12u1_amd64.deb Checksums-Sha256: fbcca38754587ad9e51f4ea91426443f7ee96d278279f0116380a28c8ece7dc2 3315 apache2_2.4.71-1~deb12u1.dsc 6b0433674ded858d2ac01e95345935ce127d5d287471762f0a7f10f4969cbfe8 10963450 apache2_2.4.71.orig.tar.gz e115c1588d1508c2d2e75a61e300bb3d8f8abe9f505018205c2caf938ff372ea 824856 apache2_2.4.71-1~deb12u1.debian.tar.xz 1c1d4d3449077f96c87c2d9b5d4e89bae05a08887f1585e9dbf6ef4f0dc3995d 3770816 apache2-bin-dbgsym_2.4.71-1~deb12u1_amd64.deb c1312ab770cf5c9b5a528a2918dd9a0c7e1bc8abd083641857543f05054b88be 1409916 apache2-bin_2.4.71-1~deb12u1_amd64.deb cabb433e1ae9e32267f94088680860fe4289fc5f66e6f8858fd5098e7fc5af9c 159880 apache2-data_2.4.71-1~deb12u1_all.deb 8102cdebb1432c1c50789ff22e5ecad50861d1a7e63d9982d3cf6ef48c65b558 329928 apache2-dev_2.4.71-1~deb12u1_amd64.deb a7b3d1131c1c63dbf9999b28e75f9a133d30f70492b419936bd51759ac77a01f 4429560 apache2-doc_2.4.71-1~deb12u1_all.deb 0cbf18c07e150b7366f00efd9a245df2645bd35a16519e273ac12b79c57ac156 3140 apache2-ssl-dev_2.4.71-1~deb12u1_amd64.deb c0d7d5d1cdc16d7831235b5e359fe446cec0754f6a2ad159750f3d75f6007ea8 12388 apache2-suexec-custom-dbgsym_2.4.71-1~deb12u1_amd64.deb 6692bb8bf7b0ea44c285462b45da70d903e84f251010bc38bad8932ab76a2d68 157292 apache2-suexec-custom_2.4.71-1~deb12u1_amd64.deb 07b9e62d8c9ca7f5cf7040117b0c104594c3df95e766a7eb4c8b1a9566e29990 11212 apache2-suexec-pristine-dbgsym_2.4.71-1~deb12u1_amd64.deb d3ac5c552ef871561764d8da2571a8f4ce69d4e55c5151cf66e00f0b96e5d21a 155772 apache2-suexec-pristine_2.4.71-1~deb12u1_amd64.deb 6fb6dfe063fb82bd3bf28fe05a68c5a10c0ca6a7fe506a6d91b50abc0301a6e4 115828 apache2-utils-dbgsym_2.4.71-1~deb12u1_amd64.deb 1d62a5130d3aed55b46a2201f6b8ec3e8dd3afc5d73a46c52ae479003251ad42 223608 apache2-utils_2.4.71-1~deb12u1_amd64.deb d454d74ad97d0c21a514c83ef5bdc40d82038b06d551f9caab1321ca2a764913 12922 apache2_2.4.71-1~deb12u1_amd64.buildinfo 199c302fd37a8904735a2d28a50b496a86d07d925f8474bb381c0a7bfe755f04 237772 apache2_2.4.71-1~deb12u1_amd64.deb 9ff00a98530e34575a49f3dc190c3490e9c238023f6c2fd6451f58723b3b5930 956 libapache2-mod-md_2.4.71-1~deb12u1_amd64.deb a5367dc49bafa36f9f238d243142cb17dcd74e327f80bbfe261aa03499dc936e 1132 libapache2-mod-proxy-uwsgi_2.4.71-1~deb12u1_amd64.deb Files: fe8806d3ca05dfadf28e2b8efc4c5a15 3315 httpd optional apache2_2.4.71-1~deb12u1.dsc d1e259552d25d0f7b5cd1486ba0f6c6e 10963450 httpd optional apache2_2.4.71.orig.tar.gz 8400f1db9fa587dc373318b3914e6e47 824856 httpd optional apache2_2.4.71-1~deb12u1.debian.tar.xz 33936d2ec2c0d784429681c7a86d813f 3770816 debug optional apache2-bin-dbgsym_2.4.71-1~deb12u1_amd64.deb 805d25db2325d5417e8bce8a236b83bd 1409916 httpd optional apache2-bin_2.4.71-1~deb12u1_amd64.deb 9d09fbc5afea7803659d756ad55aebd9 159880 httpd optional apache2-data_2.4.71-1~deb12u1_all.deb 4888b175a353af5303b3d80e47a7f952 329928 httpd optional apache2-dev_2.4.71-1~deb12u1_amd64.deb c0629381de8e24ac60bcb9a8882a7f3d 4429560 doc optional apache2-doc_2.4.71-1~deb12u1_all.deb 64517103d46c7b18a39f142d0bdfa710 3140 httpd optional apache2-ssl-dev_2.4.71-1~deb12u1_amd64.deb 28790616cec137a62c6dc0c6d857e644 12388 debug optional apache2-suexec-custom-dbgsym_2.4.71-1~deb12u1_amd64.deb 2a1ee53a99bd5d8e2629dc1899e370d0 157292 httpd optional apache2-suexec-custom_2.4.71-1~deb12u1_amd64.deb bfc018bb2534c6aedceb6ae4037a75d9 11212 debug optional apache2-suexec-pristine-dbgsym_2.4.71-1~deb12u1_amd64.deb de5e2ec6918c4ba074cab8fd19c7c4fc 155772 httpd optional apache2-suexec-pristine_2.4.71-1~deb12u1_amd64.deb 9ab9ef587e82e54e025623bdac37d4fa 115828 debug optional apache2-utils-dbgsym_2.4.71-1~deb12u1_amd64.deb 59b81f50c764b9c69970a4d9932b7e9b 223608 httpd optional apache2-utils_2.4.71-1~deb12u1_amd64.deb 829cbb54274ed9127022820a3debce9e 12922 httpd optional apache2_2.4.71-1~deb12u1_amd64.buildinfo 45985281ab7e54df3fe86df75b0a3e9b 237772 httpd optional apache2_2.4.71-1~deb12u1_amd64.deb 3d4c3958f182bbd40271c1141044a956 956 oldlibs optional libapache2-mod-md_2.4.71-1~deb12u1_amd64.deb 6b1bfc1c132eb1a281dcbaed777cb2df 1132 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.71-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmr1lgwACgkQ9tdMp8mZ 7umCwA//dNiOq17PnsVRmnRrEy6RJPm0yUWWumwMXshmujPiYQ0TWsqSIdcDjm7I Q6OEjdGy+lGrFVzZlbamwNVVa0qJSfNhR//J1IC52itrb+P9BDNjtvvcxgTEOfnA Slaiw6teDB9VTXEYRO35eQ7EP+SLaZ/XFz2InhQlMpcgqIXUkKh2HWwBN+EZg2TQ 6aESVhxwqNXUbRsVCOoyWqS3CNGSvqyVu6aDxjQxRFlaLLyot2Rs4GLzugiSgAz1 NQb0PNoJ5WWB9058NKhBmdkly7+otOZ/9a79vik1w/H+/ueGVZYob0H1mhVnPhDq ywNsAcF1JudWLk0RqSIOMo5mibZL8lrJlK5Gs2r6qvrOpWZBhw++0PBf160BbDYZ 9GnIja269qg6Onabljt+FuyVmZGNXu20OWK4grQqz4qOPBispY10IlqoQ+zNx/yy DjdaYAkK2cp+I1zvr52yW9rMXVdqYmUocq4s2MZO1e+i3WQyQSVwgF5bMRIet6F/ cg10o1vT/uuaKqavL0uISzeEmLUcGEsNp7hzAgyEZrbZTbjzktlH7SqiI/05RFFW CzVN0j+TkiCcnb4VD0SyrEJbLMkXgcuz77EP7VAKNQCjHIazraW3YPkhV9W0FTSB kuzW8cEGkNMzzEzW1OKtQXW4zr/rRFDZzJ7mCO5QGAyBRcWL+OQ= =uraU -----END PGP SIGNATURE-----
