[Git][security-tracker-team/security-tracker][master] Update status for apache2 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
72b5b148 by Salvatore Bonaccorso at 2026-10-01T20:52:49+02:00
Update status for apache2 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,63 +1,83 @@
 CVE-2026-42356
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42356
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/863594b37381151c397b9fbc609170d026411614
 CVE-2026-42528
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42528
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/a653b98099ced413982ddad6f9416e54292f4656
 CVE-2026-46729
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-46729
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/7b12a7936ec439b3e1f5fc36cfacf5b915eb652c
 CVE-2026-47360
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-47360
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/cb5163f30dd0d6bc921eeac96415a381f153ac3a
 CVE-2026-48005
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-48005
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
 CVE-2026-56153
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56153
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/6654234dcb395e07fd62255670356f84ec733195
 CVE-2026-56154
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56154
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/6e4d1e614597109909dda495d235b6a1331d7beb
 CVE-2026-56449
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56449
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/c721d4e1cf5c142149509490015cef1a75715595
 CVE-2026-57941
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-57941
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/d072ed8f06d66a30072227d61a2fc04ad9ae5c99
 CVE-2026-58415
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-58415
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/5a00f76e12c5e1e477e902b44b42b94d9bc571ed
 CVE-2026-59685
-	- apache2 <unfixed>
+	- apache2 <not-affected> (Oonly affects Apache on Windows)
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59685
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/7d158df34d07b53c010ff54bfa182a76f9fab672
 CVE-2026-59797
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59797
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/1ee1c1fef2511454461b6770b204c4934a6495d8
 CVE-2026-63045
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63045
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/c0a3e5cbcb245022d08e490f98153f90120363ed
 CVE-2026-63292
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63292
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/7ed3f91688b7a1e1ac48486fd2e5eeb2932e879f
 CVE-2026-63686
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63686
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/6fa059e4a270e0a66dd398e96875df86abff3a75
 CVE-2026-63718
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63718
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/7c32a06bc504875544185c27cfbc6d8dc257c941
 CVE-2026-73636
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73636
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
 CVE-2026-73637
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73637
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
 CVE-2026-79768
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-79768
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/dce2ddbca79be74e7bcb7b8cc7a3a291cf4e9588
 CVE-2026-93546
 	- apache2 <unfixed>
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-93546
+	NOTE: Fixed by: https://github.com/apache/httpd/commit/fa8c354189597453b2c8b38e081efa9b723abd3c
 CVE-2026-102505
 	- libimager-perl <unfixed>
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43998313/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/72b5b14899ae4ba0f5afc205bd56a7f74debfd7e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/72b5b14899ae4ba0f5afc205bd56a7f74debfd7e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/ade40136/attachment.htm>