UbuntuUpdates.org

Package "apache2-suexec-custom"

Name: apache2-suexec-custom

Description:

Apache HTTP Server configurable suexec program for mod_suexec

Latest version: 2.4.68-1ubuntu6.1
Release: stonking (26.10)
Level: updates
Repository: universe
Head package: apache2
Homepage: https://httpd.apache.org/

Links


Download "apache2-suexec-custom"


Other versions of "apache2-suexec-custom" in Stonking

Repository Area Version
base universe 2.4.68-1ubuntu4
security universe 2.4.68-1ubuntu6.1

Changelog

Version: 2.4.68-1ubuntu6.1 2026-11-10 06:09:24 UTC

apache2 (2.4.68-1ubuntu6.1) stonking-security; urgency=medium

  * SECURITY UPDATE: Arbitrary Code Execution
    - debian/patches/CVE-2026-56153.patch: Add bounds check
    - debian/patches/CVE-2026-56449.patch: Don't dump content when
      printing a comment
    - CVE-2026-56153
    - CVE-2026-56449

 -- Bruce Cable Fri, 23 Oct 2026 12:39:49 +1100

CVE-2026-56153 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVE-2026-56449 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server



About   -   Send Feedback to @ubuntu_updates