Debian/apache2: high 7.3

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via c

Action: Upgrade apache2 to 2.4.69-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2026-73637#Debian:14/apache2
• https://security-tracker.debian.org/tracker/CVE-2026-73637

published 2026-10-01T17:17:31Z · modified 2026-10-16T23:00:07.212880241Z · JSON