[ALSA-2026:64794] Low: httpd:2.4 security update
Type:
security
Severity:
low
Release date:
2026-09-29
Description:
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 mod_session-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.aarch64.rpm 256c3dd1f107538694c0c98c037bc3fbb0dc74886cce2470d52e471799d8ef91
aarch64 mod_proxy_html-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.aarch64.rpm 3e53d4087c53ac6fa098940340e439a52cf81e5d5ed932d548e5f381921e69c0
aarch64 httpd-devel-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.aarch64.rpm 3eff791585185b5e7f543ae15a6605510aac460e029433ecc2ed6792118cd813
aarch64 mod_ldap-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.aarch64.rpm 4ceced12ed0d9c4aba1447b6cab90051fc62651fed5ba6a735d9b8b1fe19da68
aarch64 mod_ssl-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.aarch64.rpm 62514b31a8e9325e1c8eeabccd51dcdf6f5c038614662214e7776961f1063ae2
aarch64 httpd-tools-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.aarch64.rpm 88439480f0b5562165df4d7abd318cc9d3792df5f5dd1e9060a41f3a0a151526
aarch64 mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.aarch64.rpm 9089a727d04e9e8a6e719c4980ccb7e179a95a0ceda7ac2d69ab335ae0179cd6
aarch64 mod_http2-1.15.7-10.module_el8.10.0+4233+8b7d9181.7.aarch64.rpm b1868165fc35b625d6662669a07f3ed91e485c5f3bc62b3f013ad4758ef7862a
aarch64 httpd-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.aarch64.rpm fb36955f4345f8e09862f5d2edd0b160b487533284d848a6364c3da09c1055f9
noarch httpd-filesystem-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.noarch.rpm 393180a1906d58fca55ab3bc8714275927cac3b64a9176b2960ff77ca0e8d0da
noarch httpd-manual-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.noarch.rpm 54c6d110f198863bc97e29677c05faadd400470f72495633e9ec72c59ec6dcba
ppc64le mod_ldap-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.ppc64le.rpm 2f108dd704f660d967a5700f99771153709dbe802121f07953cea93330e01826
ppc64le httpd-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.ppc64le.rpm 411a9b164960838ba2c8c6897e33dde59ce6133a4dd811bca9093a9cc923c744
ppc64le mod_http2-1.15.7-10.module_el8.10.0+4233+8b7d9181.7.ppc64le.rpm 4a900481c319467ddffa19ce6c06d1283471badaf2abf6167d118547aacb0472
ppc64le httpd-tools-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.ppc64le.rpm 74360f566731483ab35cdee8c28f4fcaddfcc47c8b4e9b27c5c21140090f14eb
ppc64le mod_session-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.ppc64le.rpm a22e0ffa64855672b3458986b8cbce1652f65baa67fd9bd8605f54fa6adc097e
ppc64le mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.ppc64le.rpm ac86f2bf2070a4ae5307d7aa7c99e85dcd02bc0d293c25de3fb8d2a13263e338
ppc64le mod_proxy_html-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.ppc64le.rpm b14356998ffaaf2545f44976339d83de9d30792232f9b6923c07bbd69ca57858
ppc64le mod_ssl-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.ppc64le.rpm c4e865e3eb32e200f92a356b50ebd0064a935734c4bb9d48dbf01fe9b026fc3f
ppc64le httpd-devel-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.ppc64le.rpm d5a98f4e346204ba175cadc595760eca32a8594248ba1f963303e28a13083d81
s390x httpd-devel-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.s390x.rpm 3a43861bde11c1d6a2f0d9cd85792ce32ebc1b49a04b2818dfbabb914cb9ee48
s390x httpd-tools-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.s390x.rpm 51003ea1d8bcdd0539162e90dd19b6c3be98d8f725fa3223d2d57bc2423fcc78
s390x mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.s390x.rpm 51f08f5a2c2c9925c2d8acf5069e109f519302af55ab044dba7de03782591748
s390x mod_session-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.s390x.rpm 5ebe7a73075f5e9db9ead037bc1b2c70b6d0a781ac5a56c12c22b67dfd55d2b4
s390x mod_ssl-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.s390x.rpm 840c2fa79171586601a5324a0ba0fd0b401dd4e2b7d3b1ac7c3580c19d0e5c56
s390x httpd-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.s390x.rpm 888e1fcd9ffdcd017592c41610079dd90040b0dcd8fbd89f359ecb7b54830685
s390x mod_ldap-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.s390x.rpm a071283ab4ee96fb5a0c1e907a1c2850217e184a78cd10f3af99d74fa3ea9931
s390x mod_proxy_html-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.s390x.rpm ca2ba45e7e33839c3ecbc384c7bac9571371109b96ff4ee11624467d4133daa8
s390x mod_http2-1.15.7-10.module_el8.10.0+4233+8b7d9181.7.s390x.rpm ff47e1fb2a585ec374a56215d22828192bddf16403b007260955c8e1649e8fdb
x86_64 mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.x86_64.rpm 035593075bacc46bb0e52d950bb12cb5cc30744e23799cb27f1962d697ba7e9e
x86_64 mod_ssl-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.x86_64.rpm 08958b785e3af9769eb75e790313bfd357f8808295e12da50c69d443b24668ce
x86_64 httpd-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.x86_64.rpm 15afb7274c73b17e278615ca8ccf5f67c7b671fb19f6b671fa52956426a3c23c
x86_64 mod_ldap-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.x86_64.rpm 1ccd92932982bbcd1d6fe2c1be725cb7e088c5d94072a125e6a508569590b9c2
x86_64 mod_http2-1.15.7-10.module_el8.10.0+4233+8b7d9181.7.x86_64.rpm 4beca8f6509a21445730a1fcf074335d374eaf3f5dcd6d6152c2bcd0c9f6d9fd
x86_64 httpd-tools-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.x86_64.rpm 4cfeb7b9c6ca213a9f0fa2b467c80ed1dfb18dbd3f51c6538931da070847eba7
x86_64 mod_proxy_html-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.x86_64.rpm b4cefe0959a8a1a1da8a22c1f095e4e561084951db64821a3c567a3092749f9f
x86_64 mod_session-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.x86_64.rpm e8eee78baad204f28d1124fd675d8a51881335399bb0a2b1681077e347251d78
x86_64 httpd-devel-2.4.37-65.module_el8.10.0+4270+e5f13fdb.10.x86_64.rpm ed7300e97bc0e825be3f8b0d93345bec14eb9738adf7cc9ab763068e7d29410c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.