Bug#1139340: apache2: CVE-2026-29167 CVE-2026-29170 CVE-2026-34355 CVE-2026-34356 CVE-2026-42535 CVE-2026-42536 CVE-2026-43951 CVE-2026-44119 CVE-2026-44185 CVE-2026-44186 CVE-2026-44631 CVE-2026-48913
Salvatore Bonaccorso <[email protected]> Mon, 08 Jun 2026 22:37:56 +0200
| Newsgroups | gmane.linux.debian.devel.apache |
|---|---|
| Message-ID | <178095107607.2002185.6933473439787792068.reportbug__41156.6815035016$1780951173$gmane$org@eldamar.lan> |
U291cmNlOiBhcGFjaGUyClZlcnNpb246IDIuNC42Ny0xClNldmVyaXR5OiBpbXBvcnRhbnQKVGFn czogc2VjdXJpdHkgdXBzdHJlYW0KWC1EZWJidWdzLUNjOiBjYXJuaWxAZGViaWFuLm9yZywgRGVi aWFuIFNlY3VyaXR5IFRlYW0gPHRlYW1Ac2VjdXJpdHkuZGViaWFuLm9yZz4KCkhpLAoKVGhlIGZv bGxvd2luZyB2dWxuZXJhYmlsaXRpZXMgd2VyZSBwdWJsaXNoZWQgZm9yIGFwYWNoZTIuCgpDVkUt MjAyNi0yOTE2N1swXToKfCBVc2UgQWZ0ZXIgRnJlZSB2dWxuZXJhYmlsaXR5IGluIEFwYWNoZSBI VFRQIFNlcnZlciB3aXRoIG1vZF9sZGFwIGluCnwgcGVyLWRpcmVjdG9yeSBjb25maWd1cmF0aW9u ICBUaGlzIGlzc3VlIGFmZmVjdHMgQXBhY2hlIEhUVFAgU2VydmVyOgp8IGZyb20gMi40LjAgdGhy b3VnaCAyLjQuNjcuICBVc2VycyBhcmUgcmVjb21tZW5kZWQgdG8gdXBncmFkZSB0bwp8IHZlcnNp b24gMi40LjY4LCB3aGljaCBmaXhlcyB0aGUgaXNzdWUuCgoKQ1ZFLTIwMjYtMjkxNzBbMV06Cnwg QSBjcm9zcy1zaXRlIHNjcmlwdGluZyB2dWxuZXJhYmlsaXR5IGV4aXN0cyBpbiBtb2RfcHJveHlf ZnRwJ3MgSFRNTAp8IGRpcmVjdG9yeSBsaXN0IGdlbmVyYXRpb24gaW4gQXBhY2hlIEhUVFAgU2Vy dmVyIDIuNC42NyBhbmQgZWFybGllcgp8IHdoZW4gbGlzdGluZyBGVFAgZGlyZWN0b3J5IGNvbnRl bnRzIGVpdGhlciB2aWEgZm9yd2FyZCBvciByZXZlcnNlCnwgcHJveHkgY29uZmlndXJhdGlvbi4g IFVzZXJzIGFyZSByZWNvbW1lbmRlZCB0byB1cGdyYWRlIHRvIHZlcnNpb24KfCAyLjQuNjgsIHdo aWNoIGZpeGVzIHRoaXMgaXNzdWUuCgoKQ1ZFLTIwMjYtMzQzNTVbMl06CnwgQSBidWZmZXIgb3Zl cmZsb3cgaW4gbW9kX3Byb3h5X2h0bWwgaW4gQXBhY2hlIEhUVFAgU2VydmVyIDIuNC42NyBhbmQK fCBlYXJsaWVyIGFsbG93cyBhbiBhdHRhY2sgYnkgYW4gdW50cnVzdGVkIGJhY2tlbmQuIFVzZXJz IGFyZQp8IHJlY29tbWVuZGVkIHRvIHVwZ3JhZGUgdG8gdmVyc2lvbiAyLjQuNjgsIHdoaWNoIGZp eGVzIHRoaXMgaXNzdWUuCgoKQ1ZFLTIwMjYtMzQzNTZbM106CnwgSGVhcC1iYXNlZCBCdWZmZXIg T3ZlcmZsb3cgdnVsbmVyYWJpbGl0eSBpbiBBcGFjaGUgSFRUUCBTZXJ2ZXIgd2l0aAp8IG1hbGlj aW91cyBiYWNrZW5kIHNlcnZlcnMgYW5kIFByb3h5UGFzc1JldmVyc2VDb29raWUqICBUaGlzIGlz c3VlCnwgYWZmZWN0cyBBcGFjaGUgSFRUUCBTZXJ2ZXI6IGZyb20gMi40LjAgdGhyb3VnaCAyLjQu NjcuICBVc2VycyBhcmUKfCByZWNvbW1lbmRlZCB0byB1cGdyYWRlIHRvIHZlcnNpb24gMi40LjY4 LCB3aGljaCBmaXhlcyB0aGUgaXNzdWUuCgoKQ1ZFLTIwMjYtNDI1MzVbNF06CnwgQSBwYXRoIGhh bmRsaW5nIGlzc3VlIGluIG1vZF9kYXZfZnMgaW4gQXBhY2hlIDIuNC42NyBhbmQKfCBlYXJsaWVy wqBhbGxvd3MgYSBXZWJEQVYgY29udGVudCBhdXRob3IgdG8gZGlyZWN0bHkgbWFuaXB1bGF0ZQp8 IHRydXN0ZWQgREFWIHByb3BlcnR5IGRhdGFiYXNlcywgcG90ZW50aWFsbHkgY2F1c2luZyBjaGls ZCBwcm9jZXNzCnwgY3Jhc2hlcy4gIFVzZXJzIGFyZSByZWNvbW1lbmRlZCB0byB1cGdyYWRlIHRv IHZlcnNpb24gMi40LjY4LCB3aGljaAp8IGZpeGVzIHRoaXMgaXNzdWUuCgoKQ1ZFLTIwMjYtNDI1 MzZbNV06CnwgSGVhcC1iYXNlZCBCdWZmZXIgT3ZlcmZsb3cgdnVsbmVyYWJpbGl0eSBpbiBBcGFj aGUgSFRUUCBTZXJ2ZXIKfCB3aXRowqBtb2RfeG1sMmVuYywgeG1sMlN0YXJ0UGFyc2UsIGFuZCB1 bnRydXN0ZWQgY29udGVudCAgVGhpcyBpc3N1ZQp8IGFmZmVjdHMgQXBhY2hlIEhUVFAgU2VydmVy OiBmcm9tIDIuNC4wIHRocm91Z2ggMi40LjY3LiAgVXNlcnMgYXJlCnwgcmVjb21tZW5kZWQgdG8g dXBncmFkZSB0byB2ZXJzaW9uIDIuNC42OCwgd2hpY2ggZml4ZXMgdGhlIGlzc3VlLgoKCkNWRS0y MDI2LTQzOTUxWzZdOgp8IE91dC1vZi1ib3VuZHMgUmVhZCB2dWxuZXJhYmlsaXR5IGluIEFwYWNo ZSBIVFRQIFNlcnZlciB3aXRoCnwgbW9kX2hlYWRlcnMgYW5kIG1vZF9taW1lIGFuZCBtdWx0aXBs ZSByZXNwb25zZSBsYW5ndWFnZXMuICBUaGlzCnwgaXNzdWUgYWZmZWN0cyBBcGFjaGUgSFRUUCBT ZXJ2ZXI6IGZyb20gMi40LjAgdGhyb3VnaCAyLjQuNjcuCgoKQ1ZFLTIwMjYtNDQxMTlbN106Cnwg SW1wcm9wZXIgUHJpdmlsZWdlIE1hbmFnZW1lbnQgdnVsbmVyYWJpbGl0eSBpbiBBcGFjaGUgSFRU UCBTZXJ2ZXIKfCAyLjQuNjcgYW5kIGVhcmxpZXIgYWxsb3dzIGxvY2FsIC5odGFjY2VzcyBhdXRo b3JzIHRvIHJlYWQgZmlsZXMgd2l0aAp8IHRoZSBwcml2aWxlZ2VzIG9mIHRoZSBodHRwZCB1c2Vy LiAgVGhpcyBpc3N1ZSBhZmZlY3RzIEFwYWNoZSBIVFRQCnwgU2VydmVyOiBmcm9tIHRocm91Z2gg Mi40LjY3LiAgVXNlcnMgYXJlIHJlY29tbWVuZGVkIHRvIHVwZ3JhZGUgdG8KfCB2ZXJzaW9uIDIu NC42OCwgd2hpY2ggZml4ZXMgdGhlIGlzc3VlLgoKCkNWRS0yMDI2LTQ0MTg1WzhdOgp8IEJ1ZmZl ciBPdmVyLXJlYWQgdnVsbmVyYWJpbGl0eSBpbiBBcGFjaGUgSFRUUCBTZXJ2ZXIgdmlhIG91dGJv dW5kCnwgT0NTUCByZXF1ZXN0cyB0byBhbiBhdHRhY2tlciBjb250cm9sbGVkIE9DU1Agc2VydmVy ICBUaGlzIGlzc3VlCnwgYWZmZWN0cyBBcGFjaGUgSFRUUCBTZXJ2ZXI6IGZyb20gMi40LjAgdGhy b3VnaCAyLjQuNjcuICBVc2VycyBhcmUKfCByZWNvbW1lbmRlZCB0byB1cGdyYWRlIHRvIHZlcnNp b24gMi40LjY4LCB3aGljaCBmaXhlcyB0aGUgaXNzdWUuCgoKQ1ZFLTIwMjYtNDQxODZbOV06Cnwg TG9vcCB3aXRoIFVucmVhY2hhYmxlIEV4aXQgQ29uZGl0aW9uICgnSW5maW5pdGUgTG9vcCcpIHZ1 bG5lcmFiaWxpdHkKfCBpbiB0aGUgbW9kX3Byb3h5X2Z0cCBtb2R1bGUgaW4gQXBhY2hlIEhUVFAg U2VydmVyIHdpdGggYW4gYXR0YWNrZXIKfCBjb250cm9sbGVkIGJhY2tlbmQgRlRQIHNlcnZlci4g IFRoaXMgaXNzdWUgYWZmZWN0cyB1bmRlZmluZWQ6IGZyb20KfCAyLjQuMCB0aHJvdWdoIDIuNC42 Ny4gIFVzZXJzIGFyZSByZWNvbW1lbmRlZCB0byB1cGdyYWRlIHRvIHZlcnNpb24KfCAyLjQuNjgs IHdoaWNoIGZpeGVzIHRoZSBpc3N1ZS4KCgpDVkUtMjAyNi00NDYzMVsxMF06CnwgQnVmZmVyIFVu ZGVyd3JpdGUgdnVsbmVyYWJpbGl0eSBpbiBBcGFjaGUgSFRUUCBTZXJ2ZXIgb24gY3JhZnRlZAp8 IHJlZ3VsYXIgZXhwcmVzc2lvbnMgaW4gdGhlIGNvbmZpZ3VyYXRpb24uICBUaGlzIGlzc3VlIGFm ZmVjdHMgQXBhY2hlCnwgSFRUUCBTZXJ2ZXI6IGZyb20gMi40LjAgdGhyb3VnaCAyLjQuNjcuICBV c2VycyBhcmUgcmVjb21tZW5kZWQgdG8KfCB1cGdyYWRlIHRvIHZlcnNpb24gMi40LjY4LCB3aGlj aCBmaXhlcyB0aGUgaXNzdWUuCgoKQ1ZFLTIwMjYtNDg5MTNbMTFdOgp8IFVzZSBBZnRlciBGcmVl IHZ1bG5lcmFiaWxpdHkgaW4gQXBhY2hlIEhUVFAgU2VydmVyIG1vZHVsZSBtb2RfaHR0cDIKfCB3 aGVuIGZpbGUgaGFuZGxlcyBhcmUgYWxyZWFkeSBleGhhdXN0ZWQuICBUaGlzIGlzc3VlIGFmZmVj dHMgQXBhY2hlCnwgSFRUUCBTZXJ2ZXI6IGZyb20gMi40LjU1IHRocm91Z2ggMi40LjY3LgoKTm90 ZSB0aGF0ICBDVkUtMjAyNi00OTk3NSB3YXMgYWxyZWFkeSBmaXhlZCwgc28gbm90IGxpc3RlZCBo ZXJlLgoKCklmIHlvdSBmaXggdGhlIHZ1bG5lcmFiaWxpdGllcyBwbGVhc2UgYWxzbyBtYWtlIHN1 cmUgdG8gaW5jbHVkZSB0aGUKQ1ZFIChDb21tb24gVnVsbmVyYWJpbGl0aWVzICYgRXhwb3N1cmVz KSBpZHMgaW4geW91ciBjaGFuZ2Vsb2cgZW50cnkuCgpGb3IgZnVydGhlciBpbmZvcm1hdGlvbiBz ZWU6CgpbMF0gaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJhY2tlci9DVkUt MjAyNi0yOTE2NwogICAgaHR0cHM6Ly93d3cuY3ZlLm9yZy9DVkVSZWNvcmQ/aWQ9Q1ZFLTIwMjYt MjkxNjcKWzFdIGh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNrZXIvQ1ZF LTIwMjYtMjkxNzAKICAgIGh0dHBzOi8vd3d3LmN2ZS5vcmcvQ1ZFUmVjb3JkP2lkPUNWRS0yMDI2 LTI5MTcwClsyXSBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2VyL0NW RS0yMDI2LTM0MzU1CiAgICBodHRwczovL3d3dy5jdmUub3JnL0NWRVJlY29yZD9pZD1DVkUtMjAy Ni0zNDM1NQpbM10gaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJhY2tlci9D VkUtMjAyNi0zNDM1NgogICAgaHR0cHM6Ly93d3cuY3ZlLm9yZy9DVkVSZWNvcmQ/aWQ9Q1ZFLTIw MjYtMzQzNTYKWzRdIGh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNrZXIv Q1ZFLTIwMjYtNDI1MzUKICAgIGh0dHBzOi8vd3d3LmN2ZS5vcmcvQ1ZFUmVjb3JkP2lkPUNWRS0y MDI2LTQyNTM1Cls1XSBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2Vy L0NWRS0yMDI2LTQyNTM2CiAgICBodHRwczovL3d3dy5jdmUub3JnL0NWRVJlY29yZD9pZD1DVkUt MjAyNi00MjUzNgpbNl0gaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJhY2tl ci9DVkUtMjAyNi00Mzk1MQogICAgaHR0cHM6Ly93d3cuY3ZlLm9yZy9DVkVSZWNvcmQ/aWQ9Q1ZF LTIwMjYtNDM5NTEKWzddIGh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNr ZXIvQ1ZFLTIwMjYtNDQxMTkKICAgIGh0dHBzOi8vd3d3LmN2ZS5vcmcvQ1ZFUmVjb3JkP2lkPUNW RS0yMDI2LTQ0MTE5Cls4XSBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFj a2VyL0NWRS0yMDI2LTQ0MTg1CiAgICBodHRwczovL3d3dy5jdmUub3JnL0NWRVJlY29yZD9pZD1D VkUtMjAyNi00NDE4NQpbOV0gaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJh Y2tlci9DVkUtMjAyNi00NDE4NgogICAgaHR0cHM6Ly93d3cuY3ZlLm9yZy9DVkVSZWNvcmQ/aWQ9 Q1ZFLTIwMjYtNDQxODYKWzEwXSBodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90 cmFja2VyL0NWRS0yMDI2LTQ0NjMxCiAgICBodHRwczovL3d3dy5jdmUub3JnL0NWRVJlY29yZD9p ZD1DVkUtMjAyNi00NDYzMQpbMTFdIGh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3Jn L3RyYWNrZXIvQ1ZFLTIwMjYtNDg5MTMKICAgIGh0dHBzOi8vd3d3LmN2ZS5vcmcvQ1ZFUmVjb3Jk P2lkPUNWRS0yMDI2LTQ4OTEzCgpSZWdhcmRzLApTYWx2YXRvcmUK