OESA-2026-2746

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2746

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-2746.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-2746

Upstream

CVE-2026-29167

CVE-2026-29170

CVE-2026-34355

CVE-2026-34356

CVE-2026-42535

CVE-2026-42536

CVE-2026-43951

CVE-2026-44119

CVE-2026-44186

CVE-2026-44631

CVE-2026-48913

Published

2026-06-24T11:11:40Z

Modified

2026-08-18T01:21:09.050269946Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

httpd security update

Details

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)

A cross-site scripting vulnerability exists in modproxyftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)

A path handling issue in moddavfs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.

Users are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)

Out-of-bounds Read vulnerability in Apache HTTP Server with modheaders and modmime and multiple response languages.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.(CVE-2026-43951)

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.

This issue affects Apache HTTP Server: from through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the modproxyftp module in Apache HTTP Server with an attacker controlled backend FTP server.

This issue affects undefined: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.

This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.(CVE-2026-48913)

Database specific

{
    "severity": "Critical"
}

References

Affected packages

openEuler:24.03-LTS-SP1 / httpd

Package

Name: httpd
Purl: pkg:rpm/openEuler/httpd&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.58-20.oe2403sp1

Ecosystem specific

{
    "x86_64": [
        "httpd-2.4.58-20.oe2403sp1.x86_64.rpm",
        "httpd-debuginfo-2.4.58-20.oe2403sp1.x86_64.rpm",
        "httpd-debugsource-2.4.58-20.oe2403sp1.x86_64.rpm",
        "httpd-devel-2.4.58-20.oe2403sp1.x86_64.rpm",
        "httpd-tools-2.4.58-20.oe2403sp1.x86_64.rpm",
        "mod_ldap-2.4.58-20.oe2403sp1.x86_64.rpm",
        "mod_md-2.4.58-20.oe2403sp1.x86_64.rpm",
        "mod_proxy_html-2.4.58-20.oe2403sp1.x86_64.rpm",
        "mod_session-2.4.58-20.oe2403sp1.x86_64.rpm",
        "mod_ssl-2.4.58-20.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "httpd-2.4.58-20.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "httpd-2.4.58-20.oe2403sp1.aarch64.rpm",
        "httpd-debuginfo-2.4.58-20.oe2403sp1.aarch64.rpm",
        "httpd-debugsource-2.4.58-20.oe2403sp1.aarch64.rpm",
        "httpd-devel-2.4.58-20.oe2403sp1.aarch64.rpm",
        "httpd-tools-2.4.58-20.oe2403sp1.aarch64.rpm",
        "mod_ldap-2.4.58-20.oe2403sp1.aarch64.rpm",
        "mod_md-2.4.58-20.oe2403sp1.aarch64.rpm",
        "mod_proxy_html-2.4.58-20.oe2403sp1.aarch64.rpm",
        "mod_session-2.4.58-20.oe2403sp1.aarch64.rpm",
        "mod_ssl-2.4.58-20.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "httpd-filesystem-2.4.58-20.oe2403sp1.noarch.rpm",
        "httpd-help-2.4.58-20.oe2403sp1.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2746.json"