RHSA-2026:59347

Details

Details:

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Packages(20 packages)

httpd

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-core

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-core-debuginfo

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-debuginfo

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-debugsource

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-devel

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-filesystem

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-manual

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-tools

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

httpd-tools-debuginfo

RHEL 9

Fixed in:

0:2.4.62-13.el9_8.6

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:59347

WEB

https://access.redhat.com/security/updates/classification/#low

WEB

https://bugzilla.redhat.com/show_bug.cgi?id=2486394

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59347.json