DEBIAN-CVE-2026-33007

A NULL pointer dereference in the modauthnsocache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

Apache HTTP Server mod_mime Child Process Malfunction

The vulnerability of the modmime module in the Apache HTTP Server HTTPD arises from a buffer overflow during the reading operation. Exploiting this vulnerability allows an attacker to cause a failure in the HTTPD child process by using a specially created malicious Content-Type header...