Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update

Fixed packages 17

Vulnerabilities 15

• Critical 9.8
  CVE-2026-29167

  Apache HTTP Server: mod_ldap per-dir use-after-free

  Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• Critical 9.8
  CVE-2026-44631

  Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow

  Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• Critical 9.1
  CVE-2026-42535

  Apache HTTP Server: mod_dav_fs protected directory access

  A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which fixes t…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 8.8
  CVE-2026-24072 Public exploit

  Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr

  An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  May 4, 2026
• High 7.5
  CVE-2024-42516

  Apache HTTP Server: HTTP response splitting

  HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 b…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jul 10, 2025
• High 7.5
  CVE-2024-43204

  Apache HTTP Server: SSRF with mod_headers setting Content-Type header

  SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker.  Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header …

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jul 10, 2025
• High 7.5
  CVE-2026-34355

  Apache HTTP Server: mod_proxy_html buffer overflow

  A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.5
  CVE-2026-34356

  Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

  Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the iss…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.5
  CVE-2026-42536 Public exploit

  Apache HTTP Server: mod_xml2enc heap overflow

  Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.3
  CVE-2026-44185

  Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

  Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.3
  CVE-2026-44186

  Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp

  Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.3
  CVE-2026-48913

  Apache HTTP Server: mod_http2 memory corruption when file handles exhausted

  Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• Medium 6.5
  CVE-2026-43951

  Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash

  Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• Medium 6.1
  CVE-2026-29170

  Apache HTTP Server: mod_proxy_ftp XSS

  A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to upgrade to v…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• Medium 5.5
  CVE-2026-44119

  Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules

  Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgra…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_5_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2374549
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2374553
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464941
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486394
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486395
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486397
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486399
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486402
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486405
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486406
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486411
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486414
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486415
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486416
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486419
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56868.json
• report
  https://access.redhat.com/security/cve/CVE-2024-42516
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-42516
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-42516
• article
  https://httpd.apache.org/security/vulnerabilities_24.html
• report
  https://access.redhat.com/security/cve/CVE-2024-43204
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-43204
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-43204
• report
  https://access.redhat.com/security/cve/CVE-2026-24072
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-24072
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-24072
• report
  https://access.redhat.com/security/cve/CVE-2026-29167
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-29167
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-29167
• report
  https://access.redhat.com/security/cve/CVE-2026-29170
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-29170
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-29170
• report
  https://access.redhat.com/security/cve/CVE-2026-34355
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34355
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34355
• report
  https://access.redhat.com/security/cve/CVE-2026-34356
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34356