Red Hat Security Advisory

RHSA-2026:64794

httpd:2.4 security update

Released 2026-09-08 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-65.module+el8.10.0+24755+06195b95.10.aarch64::httpd:2.4, httpd-2.4.37-65.module+el8.10.0+24755+06195b95.10.ppc64le::httpd:2.4, httpd-2.4.37-65.module+el8.10.0+24755+06195b95.10.s390x::httpd:2.4 +38

Fixes 1 record

TI-2026-23285 CVE-2026-29167 · GHSA-85f4-9pxx-739j

Apache HTTP Server: mod_ldap per-dir use-after-free

MEDIUM 50

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-06-08 Partial fix CWE-416