Debian alert DLA-4571-1 (apache2)

From:
             
 
rouca@debian.org
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4571-1] apache2 security update
Date:
             
 
Fri, 08 May 2026 11:12:21 +0200
Message-ID:
             
 
<5512c51a6a005901b40cfb81f51bb72f@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4571-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                   Bastien Roucariès
May 08, 2026                                  https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : apache2
Version        : 2.4.67-1~deb11u1
CVE ID         : CVE-2026-24072 CVE-2026-29169 CVE-2026-33006 
                 CVE-2026-33007 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 
                 CVE-2026-34059
Debian Bug     : 1135737

Multiple vulnerabilities have been discovered in the Apache HTTP server,
which may result in remote code execution, privilege escalation, denial
of service or information disclosure.

For Debian 11 bullseye, these problems have been fixed in version
2.4.67-1~deb11u1.

We recommend that you upgrade your apache2 packages.

For the detailed security status of apache2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/apache2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=1Qrs
-----END PGP SIGNATURE-----