Source: apache2 Version: 2.4.69-1 X-Debbugs-CC: [email protected] Severity: grave Tags: security upstream
Hi, The following vulnerabilities were published for apache2. CVE-2026-119618[0]: | mod_http2: heap corruption and RCE in assign_headers CVE-2026-106023[1]: | mod_md NULL pointer dereference leads to child process crash CVE-2026-109163[2]: | mod_vhost_alias 1 byte stack buffer overwrite (after CVE-2026-63292) If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-119618 https://www.cve.org/CVERecord?id=CVE-2026-119618 [1] https://security-tracker.debian.org/tracker/CVE-2026-106023 https://www.cve.org/CVERecord?id=CVE-2026-106023 [2] https://security-tracker.debian.org/tracker/CVE-2026-109163 https://www.cve.org/CVERecord?id=CVE-2026-109163 Regards, Salvatore
