CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56154 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42356 affecting package httpd for versions less than 2.4.69-1

CVE-2026-42356 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1

CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-48005 affecting package httpd for versions less than 2.4.69-1

CVE-2026-48005 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1

CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1

CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63292 affecting package httpd for versions less than 2.4.69-1

CVE-2026-63292 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...

Amazon Linux 2 : httpd (ALAS-2026-3990)

The version of httpd installed on the remote host is prior to 2.4.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3990 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI...

Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1626)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261626 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2023-27522, CVE-2025-49812, CVE-2025-23048,...

Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1625)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261625 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 24 CVEs: CVE-2023-25690, CVE-2023-31122, CVE-2022-28615,...

Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3202)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3202 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already b...

httpd: Fix of CVE-2026-56154

CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...

httpd bug fix and enhancement update

An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

CLEANSTART-2026-PP80959 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLEANSTART-2026-GY12147 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's

Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...

CLEANSTART-2026-TY04609 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server

Description: This update fixes the following issues: Release notese highlights: Added a note about the SUSE Registry IP address change. Update to SUSE Multi-Linux Manager 5.2.1 Security issues Fixed: CVE-2026-39821 Bugs mentioned bsc1208800, bsc1230568, bsc1230949, bsc1258382, bsc1266481...

httpd: Fix of CVE-2026-56153

CVE-2026-56153: modcharsetlite: out-of-bounds write in finishpartialchar when a partial multibyte character straddles buckets; stop filling ctx-buf once it is full...

Fedora 44 : httpd (2026-34b2d69632)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-34b2d69632 advisory. This update includes httpd version 2.4.69 addressing various security issues, see https://downloads.apache.org/httpd/CHANGES2.4.69 for more...