7206 matches found
CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1
CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63045 affecting package httpd for versions less than 2.4.69-1
CVE-2026-63045 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-93546 affecting package httpd for versions less than 2.4.69-1
CVE-2026-93546 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-57941 affecting package httpd for versions less than 2.4.69-1
CVE-2026-57941 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-73637 affecting package httpd for versions less than 2.4.69-1
CVE-2026-73637 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-59797 affecting package httpd for versions less than 2.4.69-1
CVE-2026-59797 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63292 affecting package httpd for versions less than 2.4.69-1
CVE-2026-63292 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
Amazon Linux 2 : httpd (ALAS-2026-3990)
The version of httpd installed on the remote host is prior to 2.4.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3990 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI...
Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3202)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3202 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already b...
Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1625)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261625 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 24 CVEs: CVE-2023-25690, CVE-2023-31122, CVE-2022-28615,...
Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1626)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261626 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2023-27522, CVE-2025-49812, CVE-2025-23048,...
httpd: Fix of CVE-2026-63292
CVE-2026-63292: modvhostalias: stack buffer overflow when a single Host header segment exceeds HUGESTRINGLEN; reject the expansion...
CLSA-2026-1791487835 httpd: Fix of CVE-2026-63292
CVE-2026-63292: modvhostalias: stack buffer overflow when a single Host header segment exceeds HUGESTRINGLEN; reject the expansion...
httpd: Fix of CVE-2026-56154
CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...
CLSA-2026-1791395988 httpd: Fix of CVE-2026-56154
CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...
CLSA-2026-1791552138 httpd: Fix of CVE-2026-63686
CVE-2026-63686: fix modxml2enc NULL pointer dereference in xml2encffunc on a failed or incomplete charset conversion...
CLSA-2026-1791552137 httpd: Fix of CVE-2026-63686
CVE-2026-63686: fix modxml2enc NULL pointer dereference in xml2encffunc on a failed or incomplete charset conversion...
httpd bug fix and enhancement update
An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...
CLSA-2026-1791538487 httpd: Fix of 17 CVEs
CVE-2026-58415: moddavfs: deny every request for the .DAV state directory from a fixup hook, so the default handler can no longer serve the lock and property databases to GET requests information disclosure - CVE-2026-59797: modssl: restrict the file and filesize functions in SSLRequire...