CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc (CENTOS7:CLSA-2026:1772146785)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1772146785 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (ciqsa-2026_0678)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260678 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2025-49812, CVE-2024-47252. Tenable has...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc (ciqsa-2026_0671)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260671 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-38474. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (ciqsa-2026_0669)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260669 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 9 CVEs: CVE-2022-22721, CVE-2022-26377, CVE-2006-20001...

Rocky Linux 10.2 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc (crlsa-2026_60004)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202660004 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...

Rocky Linux 10.2 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource Multiple Vulnerabilities (crlsa-2026_34355)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202634355 advisory. httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 httpd:...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc (ciqsa-2026_0675)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260675 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2023-31122. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2026_22551)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202622551 advisory. httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase CVE-2025-53020 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc Multiple Vulnerabilities (crlsa-2022_0891)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220891 advisory. httpd: NULL pointer dereference via malformed requests CVE-2021-34798 httpd: Out-of-bounds write in apescapequotes via malicious input CVE-2021-39275 Tenab...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2023:1696536930)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1696536930 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc Multiple Vulnerabilities (crlsa-2025_23732)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523732 advisory. httpd: Apache HTTP Server: CGI environment variable override CVE-2025-65082 modmd: Apache HTTP Server: modmd ACME, unintended retry intervals CVE-2025-557...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1751271625)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1751271625 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 9 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_8067)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228067 advisory. httpd: modsed: Read/write beyond bounds CVE-2022-23943 httpd: modlua: Use of uninitialized value of in r:parsebody CVE-2022-22719 httpd: core: Possible...

Rocky Linux 8.8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc Multiple Vulnerabilities (ciqsa-2026_1011)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261011 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 8.8. It addresses 7 CVEs: CVE-2023-45802, CVE-2024-27316, CVE-2024-38477,...

Rocky Linux 8.8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc Multiple Vulnerabilities (ciqsa-2026_0314)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260314 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2023-31122, CVE-2023-38709, CVE-2024-38476. Tenable h...

Rocky Linux 9 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2026_25057)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202625057 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block direct...

Rocky Linux 9.4 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0536)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260536 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2025-23048, CVE-2025-49812, CVE-2024-47252. Tenable h...

CLSA-2026-1790764490 cyrus-imapd: Fix of CVE-2026-61915

use strcmpsafe/strncmpsafe for VPATCH PATCHACTION string matching: icalpropertygetvalueasstring returns NULL for a property parsed with an empty value, so a VPATCH carrying 'SUMMARY;PATCH-ACTION=BYVALUE:' crashed the httpd worker on the same authenticated CalDAV path as CVE-2026-61915...

AlmaLinux 9.2 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.2:CLSA-2025:1752247075)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752247075 advisory. - A flaw was found in the modauthopenidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1769013944)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1769013944 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables se...