-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 05 Jun 2026 12:55:53 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: mips64el Version: 2.4.67-1~deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Bastien Roucariès Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.67-1~deb12u3) bookworm-security; urgency=medium . * Fix CVE-2026-49975 (HTTP/2 Bomb) The bomb targets HPACK, HTTP/2's header compression scheme: one byte on the wire becomes one full header allocation on the server, repeated thousands of times per request. The hold is a zero-byte flow-control window that keeps the server from ever freeing any of it. Checksums-Sha1: 521caf56fa8858b490211d9627d43f82c2b28b50 3590224 apache2-bin-dbgsym_2.4.67-1~deb12u3_mips64el.deb 23dd361c92e8cac059e64e91be22879f0b767053 1238200 apache2-bin_2.4.67-1~deb12u3_mips64el.deb c45d01c6da5d63c2b05466f5d36bacc6a1764702 323092 apache2-dev_2.4.67-1~deb12u3_mips64el.deb 0f8e38e49dd2efad533a55c6aefd5332aa0e6479 3144 apache2-ssl-dev_2.4.67-1~deb12u3_mips64el.deb de4ec1ac7113c552561aa52af462cd82b915cbab 12956 apache2-suexec-custom-dbgsym_2.4.67-1~deb12u3_mips64el.deb b9f1cadf0a6fdef2f6fdbf80eda5a761471664f1 150340 apache2-suexec-custom_2.4.67-1~deb12u3_mips64el.deb 767b4b91e9d9a599adc25008b8081b4b4d3832a6 11704 apache2-suexec-pristine-dbgsym_2.4.67-1~deb12u3_mips64el.deb 968bf63e5669b716f9d835f353b543dad1c26a0e 148792 apache2-suexec-pristine_2.4.67-1~deb12u3_mips64el.deb 70ea12cc0883e2f60787e334da7b9a971cf204d6 122208 apache2-utils-dbgsym_2.4.67-1~deb12u3_mips64el.deb 091fb63b2e0291f097f7c5dea077ce0fabc696a5 216024 apache2-utils_2.4.67-1~deb12u3_mips64el.deb 37275edbd78fca577f65bfe1a0790a17cb3672df 11788 apache2_2.4.67-1~deb12u3_mips64el-buildd.buildinfo 4fdded75dd08ee5907b578fec4efe36f7be3cbd2 231040 apache2_2.4.67-1~deb12u3_mips64el.deb 6e84694c438bae0c19260633057a17c782b7ce70 960 libapache2-mod-md_2.4.67-1~deb12u3_mips64el.deb 4c4a6c8b52eec7166abbe075ea63c89af9135a84 1136 libapache2-mod-proxy-uwsgi_2.4.67-1~deb12u3_mips64el.deb Checksums-Sha256: a9f2e7acbfc8ddfb0886c292e4199bda8127b720bcbe406f0c2a87aae5cb1e5f 3590224 apache2-bin-dbgsym_2.4.67-1~deb12u3_mips64el.deb dae9d84aead0b65076bb20c32f7f334d58059b67be035709950f00fa1092d895 1238200 apache2-bin_2.4.67-1~deb12u3_mips64el.deb da4ba2fa509dc4cac2735ee9623868d8c952fe06bf3b8f0d42429e32514253e7 323092 apache2-dev_2.4.67-1~deb12u3_mips64el.deb bdb4876691459d5102ee842cf4a573978697b680a857d06c6d4c18d064b6af81 3144 apache2-ssl-dev_2.4.67-1~deb12u3_mips64el.deb ad551c841813a82aed682b302ab1df38726e410ac0c4fad95dfca3b467bac785 12956 apache2-suexec-custom-dbgsym_2.4.67-1~deb12u3_mips64el.deb 972058a99eadf20c2a87254ea885263fb42e3015b86e77cba0ea0aebdcfb7355 150340 apache2-suexec-custom_2.4.67-1~deb12u3_mips64el.deb ea8cc82232703401470b9f3a24989f1617744fac56e6dcf8c712e76b8566e823 11704 apache2-suexec-pristine-dbgsym_2.4.67-1~deb12u3_mips64el.deb 349d4d0ee0f5f06fc7478def12bd074f7423790c1014507b3fa2263f7dc3e543 148792 apache2-suexec-pristine_2.4.67-1~deb12u3_mips64el.deb abf97b2d35553c2e4231b61c7acae67cdce6bcbbec6ff74c629e0c67f8b42228 122208 apache2-utils-dbgsym_2.4.67-1~deb12u3_mips64el.deb 3510c175ef25c122d82f08f11ee754c33054f33e93abf3ebc86f59360c700dc2 216024 apache2-utils_2.4.67-1~deb12u3_mips64el.deb 5416a638e217e4ede4fa20c6465b177d65457c1b782aed364ecada0de5afa2fb 11788 apache2_2.4.67-1~deb12u3_mips64el-buildd.buildinfo 6d544421263b3ce86dafdf4350596003443c023b4bdbac4eadef59e4d5964645 231040 apache2_2.4.67-1~deb12u3_mips64el.deb 89169e866e488a20598ebcc470f4e28717a4c09bc927118a6ef9477eb327d26e 960 libapache2-mod-md_2.4.67-1~deb12u3_mips64el.deb 03b23ee77f5b700c7990d9e25c0022f7d2786830944d376e666a0661837efa64 1136 libapache2-mod-proxy-uwsgi_2.4.67-1~deb12u3_mips64el.deb Files: 84ed8a190e52453d9824e0f220dac79d 3590224 debug optional apache2-bin-dbgsym_2.4.67-1~deb12u3_mips64el.deb 81232c335695c351f25315d3bf570287 1238200 httpd optional apache2-bin_2.4.67-1~deb12u3_mips64el.deb bbf69a76e1502de792dc762d5f999eaf 323092 httpd optional apache2-dev_2.4.67-1~deb12u3_mips64el.deb 5d514bade4d092f67425a887e8c235cf 3144 httpd optional apache2-ssl-dev_2.4.67-1~deb12u3_mips64el.deb cc6c6df305fc293bfb4b58b923667fcf 12956 debug optional apache2-suexec-custom-dbgsym_2.4.67-1~deb12u3_mips64el.deb 62bf7ae8a7944dd955d53843ee53f818 150340 httpd optional apache2-suexec-custom_2.4.67-1~deb12u3_mips64el.deb 96677a500a7bad72f9bd4020e6663281 11704 debug optional apache2-suexec-pristine-dbgsym_2.4.67-1~deb12u3_mips64el.deb c252f6839c04a8b33d1e062ab0446821 148792 httpd optional apache2-suexec-pristine_2.4.67-1~deb12u3_mips64el.deb 027f9558f6df8d9ef477c20117903229 122208 debug optional apache2-utils-dbgsym_2.4.67-1~deb12u3_mips64el.deb 7f1574f19aad5fe2166c98c3ae2ac576 216024 httpd optional apache2-utils_2.4.67-1~deb12u3_mips64el.deb 1443ea16914c8db5d3de747365e99ae7 11788 httpd optional apache2_2.4.67-1~deb12u3_mips64el-buildd.buildinfo 305e3443899eb84023feb09c0994805b 231040 httpd optional apache2_2.4.67-1~deb12u3_mips64el.deb 277282b408deaa1feae2b3e4ee198fd7 960 oldlibs optional libapache2-mod-md_2.4.67-1~deb12u3_mips64el.deb 44f0ad277a6f97f1400316cf9ea1219f 1136 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.67-1~deb12u3_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmokE4gACgkQHrk2gTKe WgiXiRAArxaFSv9UlIljiyoFvjxICWKHMKGfCaU3EaM8EX/oVVT6VHn2z3tuPJ+X C1sGlWELIDG2lfRd8jvrQXYCgI2hVqIJzev9u/vYNKU5QL5bTSbLms+yS1as2apl VSsi5ylzFtDdWN0Bb1jLOivYhsJFevLfUIOmH85nZNIeaZBgoB6SYzGhWcFY2mPD vQl2hbrH1Ym5ugxBDCPIJ78J0I2/XrnNhmIw97Id+OjdakjZUBgdojQ3BEjQ3NNT gSbtP5NFd15GT2896vDDsMgXHTNfiwWhZrsq13FpGXo+uOb9grFIBaJkwsJamaKo 5yvHen2HQ79TkJ8BDtkY3+oMEg3yyX3Z8Eq3we33PbK+/AepDtHEyp8jniwsBMOP WR4ho5zsbtPdoc2xd0P+3EChdhYdNN8H+pZu8AQj22EVN1l9U561OKyYTVrL2UUN 909rXISjHWecUAmujtt4AqEVaypfDiRlTkxxRr42m/qPlT4bvHw+0XargY8on2ub yr6b1iiPqh7NgyBj3CqPDhsJpVeSn+BQJ4INQuAgXyQIN9JhEmokuzEcbAbvGy9A 6VMibnOxa9E6KnuaB5cUXK0S3pIc7rOUPx90yhJHcyPI4+1i4GQ0ysxDbcydmNZE nZtJVvSOqwIwvsXtaIOxRoxgVe9vcD4yJ5V0Fq0aiN61I8Yq+eM= =Xr6V -----END PGP SIGNATURE-----