[security - low] httpd:2.4 security update

エラータID: AXSA:2026-1840:01

Release date: 
Tuesday, September 15, 2026 - 20:57
Subject: 
[security - low] httpd:2.4 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Low
Description: 

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-29167
Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

Modularity name: "httpd"
Stream name: "2.4"

Solution: 

Update packages.

CVEs: 
CVE-2026-29167
Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
Additional Info: 

N/A

Download: 

SRPMS
  1. httpd-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.src.rpm
    MD5: 86224403eae855b24c043a411093f5c7
    SHA-256: 4b11fbabb7a64edefed34888e45278e131ef8695e46de1f68ff4a97c742a7a14
    Size: 7.01 MB
  2. mod_http2-1.15.7-10.module+el8+2042+746b4e36.7.src.rpm
    MD5: bb71bbcb86b55435b03298738ff281f5
    SHA-256: 82a0865c988b3a984207ae740ec041da5fe3d3dd1634d8b1cb83d185ee65d4be
    Size: 1.03 MB
  3. mod_md-2.0.8-8.module+el8+2042+746b4e36.2.src.rpm
    MD5: fc4d755b7a65502623f4806dc07c84c8
    SHA-256: fffece419e0fdcedd3cadb7e5a13cb787277cd803d007a7c0218f766c42f65b8
    Size: 636.08 kB

Asianux Server 8 for x86_64
  1. httpd-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 196a79d5a82054c1f8777509b3eb408b
    SHA-256: 7745250e3157243389a768d1419cd41fea4ec7d19e8b921a3676b26c06d8f773
    Size: 1.42 MB
  2. httpd-debugsource-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 43229f1df2069bbcf7e2c8696f6e4299
    SHA-256: 02b661f579cfa430dd3244db5899ae4a7395ef5d0deb869e27145c134d42922f
    Size: 1.46 MB
  3. httpd-devel-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 538c744489fc2e77a8ecd14681a09455
    SHA-256: 112cf8d9ae8c921b354e78f9da5e3578b2c9d92a8a35e00cf03b9248979b919a
    Size: 231.59 kB
  4. httpd-filesystem-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.noarch.rpm
    MD5: 5534c515cd05c6d8e913bda401897dc4
    SHA-256: d2d019b5f5bdcff30ac5dc399a22787dfd64f6422fae6b85e022388568058297
    Size: 47.69 kB
  5. httpd-manual-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.noarch.rpm
    MD5: 38354d722a96f195b8774e87bd5e4b67
    SHA-256: 59aea47961a8e04fac7c292673037eca91d90af973b9f30822b4fea9592dba5e
    Size: 2.38 MB
  6. httpd-tools-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 6582187519526b0623595daefae9bdfc
    SHA-256: 9b9170e394d6d2d2b1f8e229328cfb4d1f79d61792e1a2277434ffe39d7867e5
    Size: 114.60 kB
  7. mod_http2-1.15.7-10.module+el8+2042+746b4e36.7.x86_64.rpm
    MD5: c74a5e9ecf1146684d0a7df5a3574785
    SHA-256: cdde8f783e2dde347f3a8d5ab7e4f20828f5a00d619e7095a1d8216dacc8c49f
    Size: 155.69 kB
  8. mod_http2-debugsource-1.15.7-10.module+el8+2042+746b4e36.7.x86_64.rpm
    MD5: 9bb9fe40c967b63fbb30cb5f876a7c3d
    SHA-256: 35171cdaba500a9c5e0ae963dab4e8c350774d36a12fa920cceca04262059d43
    Size: 149.92 kB
  9. mod_ldap-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 2ba4a4547a98c312d1dd1f6cbe2d87da
    SHA-256: 88fc512e55832d6c6d52943357ed4291b55d8e47f22f48759fa81b92973b6cdd
    Size: 92.88 kB
  10. mod_md-2.0.8-8.module+el8+2042+746b4e36.2.x86_64.rpm
    MD5: 3ddd104ccb9dab1496d261f44f3dc0cc
    SHA-256: ce97f4f7be03e5726a00e127ec02f9927a391619d56e5aea6e6a60c39f10a9d0
    Size: 183.47 kB
  11. mod_md-debugsource-2.0.8-8.module+el8+2042+746b4e36.2.x86_64.rpm
    MD5: b5f049a8ba94295a72a92ee5537d72e6
    SHA-256: 46135981c88ebfdf1b66fb4fb34ab6d1f7ecc9f87b90b94928d009830ac4c1dd
    Size: 126.48 kB
  12. mod_proxy_html-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 2237de7064e2da1f64df1c30e33b60c3
    SHA-256: b2c816f32e5b7e7dad6ef083022f7f3e36c484be8d522b8697895f64521e2324
    Size: 69.72 kB
  13. mod_session-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 03488ff91f2553e167410751b485610e
    SHA-256: 9fdc08ae0e9971711b5044f37bf99303da15df6b477de7cd7707026eda80641d
    Size: 81.51 kB
  14. mod_ssl-2.4.37-65.module+el8+2042+746b4e36.10.ML.1.x86_64.rpm
    MD5: 59f8b3564e7e5e28382b63e2151efd5e
    SHA-256: d91b8f2e2ecc81338733bb2b6871377cd8844d6d61dba16c8be15cc6a07b6f84
    Size: 144.94 kB