Red Hat Security Advisory: mod_md security update

Fixed packages 1

Vulnerabilities 1

• High 7.3
  CVE-2026-29168

  Apache HTTP Server: mod_md unrestricted OCSP response

  Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's  mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the i…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  May 5, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2466753
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57641.json
• report
  https://access.redhat.com/security/cve/CVE-2026-29168
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-29168
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-29168
• article
  https://httpd.apache.org/security/vulnerabilities_24.html