Medium ELSA-2026-30844 1 CVE

Moderate: mod_md security update (Oracle Linux 9)

Published Jun 29, 2026 · Updated Jun 29, 2026

Ecosystem: Oracle Linux

Summary

[1:2.4.26-2.1]
- Resolves: RHEL-175644 - mod_md: OCSP response limits
(CVE-2026-29168)

[1:2.4.26-2]
- Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
retry intervals (CVE-2025-55753)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	mod_md	1:2.4.26-2.el9_8.1

Vulnerabilities 1

High 7.3

CVE-2026-29168

Apache HTTP Server: mod_md unrestricted OCSP response

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the i…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

May 5, 2026