Red Hat Security Advisory

RHSA-2026:34355

mod_http2 security, bug fix, and enhancement update

Released 2026-07-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2026-36173 CVE-2026-48913 · GHSA-fjj2-vrp3-84fv

LOW 39

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00479 Published 2026-06-08 Partial fix CWE-416

TI-2026-32006 CVE-2026-43951 · GHSA-4qxr-h6g3-8f95

LOW 36

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00545 Published 2026-06-08 Partial fix CWE-125