Skip to content
Heist/ feed
Back to feed
UnratedFix available

[DSA 6569-1] apache2 security update

Type: patchSources: Debian DSA

Multiple vulnerabilities in the Apache HTTP server may cause denial of service, information disclosure, authentication bypass, or HTTP request smuggling. The issues are fixed for Debian trixie in apache2 version 2.4.69-1~deb13u1.

Products
apache2
Affected versions
Not specified
Fixed versions
2.4.69-1~deb13u1
CVEs
CVE-2026-42356, CVE-2026-42528, CVE-2026-46729, CVE-2026-47360, CVE-2026-48005, CVE-2026-56153, CVE-2026-56154, CVE-2026-56449, CVE-2026-57941, CVE-2026-58415, CVE-2026-59797, CVE-2026-63045, CVE-2026-63292, CVE-2026-63686, CVE-2026-63718, CVE-2026-73636, CVE-2026-73637, CVE-2026-79768, CVE-2026-93546
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 09:59 UTC · Revision 1

Source evidence

[DSA 6569-1] apache2 security update

official-debian-dsa · Original source

Published 16 Oct 2026, 00:00 UTC

Multiple vulnerabilities in the Apache HTTP server may cause denial of service, information disclosure, authentication bypass, or HTTP request smuggling. The issues are fixed for Debian trixie in apache2 version 2.4.69-1~deb13u1.

For the stable distribution (trixie), these problems have been fixed in version 2.4.69-1~deb13u1.

apache2

Fixed versions: 2.4.69-1~deb13u1

Complete source record
{
  "id": "b3495333c1b7711554cacf78b9be20202504dd7458fbc2c505b4fad5359dd8f5",
  "url": "https://lists.debian.org/debian-security-announce/2026/msg00483.html",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "[DSA 6569-1] apache2 security update",
    "summary": "Multiple vulnerabilities in the Apache HTTP server may cause denial of service, information disclosure, authentication bypass, or HTTP request smuggling. The issues are fixed for Debian trixie in apache2 version 2.4.69-1~deb13u1.",
    "evidence": "For the stable distribution (trixie), these problems have been fixed in version 2.4.69-1~deb13u1.",
    "products": [
      {
        "name": {
          "value": "apache2",
          "evidence": "Package : apache2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2.4.69-1~deb13u1",
            "evidence": "For the stable distribution (trixie), these problems have been fixed in version 2.4.69-1~deb13u1."
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-42356",
        "evidence": "CVE ID : CVE-2026-42356"
      },
      {
        "value": "CVE-2026-42528",
        "evidence": "CVE-2026-42528"
      },
      {
        "value": "CVE-2026-46729",
        "evidence": "CVE-2026-46729"
      },
      {
        "value": "CVE-2026-47360",
        "evidence": "CVE-2026-47360"
      },
      {
        "value": "CVE-2026-48005",
        "evidence": "CVE-2026-48005"
      },
      {
        "value": "CVE-2026-56153",
        "evidence": "CVE-2026-56153"
      },
      {
        "value": "CVE-2026-56154",
        "evidence": "CVE-2026-56154"
      },
      {
        "value": "CVE-2026-56449",
        "evidence": "CVE-2026-56449"
      },
      {
        "value": "CVE-2026-57941",
        "evidence": "CVE-2026-57941"
      },
      {
        "value": "CVE-2026-58415",
        "evidence": "CVE-2026-58415"
      },
      {
        "value": "CVE-2026-59797",
        "evidence": "CVE-2026-59797"
      },
      {
        "value": "CVE-2026-63045",
        "evidence": "CVE-2026-63045"
      },
      {
        "value": "CVE-2026-63292",
        "evidence": "CVE-2026-63292"
      },
      {
        "value": "CVE-2026-63686",
        "evidence": "CVE-2026-63686"
      },
      {
        "value": "CVE-2026-63718",
        "evidence": "CVE-2026-63718"
      },
      {
        "value": "CVE-2026-73636",
        "evidence": "CVE-2026-73636"
      },
      {
        "value": "CVE-2026-73637",
        "evidence": "CVE-2026-73637"
      },
      {
        "value": "CVE-2026-79768",
        "evidence": "CVE-2026-79768"
      },
      {
        "value": "CVE-2026-93546",
        "evidence": "CVE-2026-93546"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-debian-dsa",
  "document_id": 23401,
  "published_at": "2026-10-16T00:00:00+00:00"
}