Summary
[1:2.4.26-5.1]
- Resolves: RHEL-175647 - mod_md: OCSP response limits
(CVE-2026-29168)
[1:2.4.26-5]
- Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
retry intervals (CVE-2025-55753)
[1:2.4.26-3]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
[1:2.4.26-2]
- Bump release for June 2024 mass rebuild
[1:2.4.26-1]
- update to 2.4.26
[1:2.4.25-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
[1:2.4.25-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
[1:2.4.25-1]
- update to 2.4.25
[1:2.4.24-1]
- new version 2.4.24
[1:2.4.21-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | mod_md | 1:2.4.26-5.el10_2.1 |
Vulnerabilities 1
-
High 7.3
Apache HTTP Server: mod_md unrestricted OCSP response
Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the i…