UbuntuUpdates.org

Package "apache2"

Name: apache2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • debug symbols for apache2-bin
  • Apache HTTP Server configurable suexec program for mod_suexec
  • debug symbols for apache2-suexec-custom
  • Apache HTTP Server standard suexec program for mod_suexec
Latest version: 2.4.68-1ubuntu6.1
Release: stonking (26.10)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "apache2" in Stonking

Repository Area Version
base universe 2.4.68-1ubuntu4
base main 2.4.68-1ubuntu4
security main 2.4.68-1ubuntu6.1
security universe 2.4.68-1ubuntu6.1
updates main 2.4.68-1ubuntu6.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.4.68-1ubuntu6.1 2026-11-10 06:09:24 UTC

apache2 (2.4.68-1ubuntu6.1) stonking-security; urgency=medium

  * SECURITY UPDATE: Arbitrary Code Execution
    - debian/patches/CVE-2026-56153.patch: Add bounds check
    - debian/patches/CVE-2026-56449.patch: Don't dump content when
      printing a comment
    - CVE-2026-56153
    - CVE-2026-56449

 -- Bruce Cable Fri, 23 Oct 2026 12:39:49 +1100
CVE-2026-56153 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVE-2026-56449 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server


About   -   Send Feedback to @ubuntu_updates