Red Hat Security Advisory

RHSA-2026:60004

httpd security update

Released 2026-08-26 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) httpd-2.4.63-13.el10_2.6, httpd-core-2.4.63-13.el10_2.6, httpd-devel-2.4.63-13.el10_2.6 +8

Fixes 1 record

TI-2026-23285 CVE-2026-29167 · GHSA-85f4-9pxx-739j

Apache HTTP Server: mod_ldap per-dir use-after-free

MEDIUM 50

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-06-08 Partial fix CWE-416