[security - high] httpd:2.4 security update

エラータID: AXSA:2026-786:01

リリース日: 
2026/06/15 Monday - 21:36
題名: 
[security - high] httpd:2.4 security update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-49975
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Modularity name: "httpd"
Stream name: "2.4"

解決策: 

Update packages.

CVE: 
CVE-2026-49975
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. httpd-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.src.rpm
    MD5: f76fcc25e4c372a53f85ce4f0b643209
    SHA-256: 60c0874293791ddbbb493ad985bc075c5994952d2a788ecd1d804920d638f88a
    Size: 7.00 MB
  2. mod_http2-1.15.7-10.module+el8+1988+202d1f93.6.src.rpm
    MD5: 2ac2a28df542c87b19b2f1c2fe61dd12
    SHA-256: 3abdeadc1af382a033b0b900cba1a48782cc4e192cfded65287f4a88c46b83b4
    Size: 1.03 MB
  3. mod_md-2.0.8-8.module+el8+1988+202d1f93.2.src.rpm
    MD5: 7e79a4966e71bde86ef01abab92924ab
    SHA-256: 2b083573dc89c166fb99279dbc10155d382069b9452c8222a818d97e67d9990f
    Size: 636.08 kB

Asianux Server 8 for x86_64
  1. httpd-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: c3adc91945aad0432f723956ab330f37
    SHA-256: 04e4ac1ee44583db2136fe5c7fe63bdeb5a441896114d02832fd346d519dd116
    Size: 1.42 MB
  2. httpd-debugsource-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: 8db390b07dc65416dda53d6679b2e17c
    SHA-256: daf3e61051f69fe9702de697da7e186cb201a8497e3a9e5863b6811af309bfd2
    Size: 1.46 MB
  3. httpd-devel-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: 44b7006530bd130e67386e2ff548b006
    SHA-256: 063c4711906fe15d46505c7f703625f338e10e0e4dc1c0e0d082b479ae01daec
    Size: 230.08 kB
  4. httpd-filesystem-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.noarch.rpm
    MD5: b0895545db1a18a0722e6ec4d9644305
    SHA-256: 1e7e9fbb1d5756b5549cf0d84ffcf17137a848eb35d6d141185c66cdb2fc42a2
    Size: 46.23 kB
  5. httpd-manual-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.noarch.rpm
    MD5: 3fc5d35ae69f9c7066ef8b5d62e27af1
    SHA-256: 1e35755160ca1e7a3952730c7da4369e7bd635b5432eb90af7098ac3fe3a62db
    Size: 2.38 MB
  6. httpd-tools-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: 4de8bb50e17a7d7cde88cbad6f91e205
    SHA-256: 6fcf1f269bc2377918f673a7d881b2ff55102391fb954d7c4d7f44957a06249b
    Size: 113.30 kB
  7. mod_http2-1.15.7-10.module+el8+1988+202d1f93.6.x86_64.rpm
    MD5: cfe9ee4716b273d41cb0486f77808804
    SHA-256: 95d31eedfde8b44bd4f7523c7f46fb9bee72949de9ed44848914eba82a42627b
    Size: 155.78 kB
  8. mod_http2-debugsource-1.15.7-10.module+el8+1988+202d1f93.6.x86_64.rpm
    MD5: 5b41cb4f735fb85e12d541f4358880e1
    SHA-256: 4cfb5c9200b16710ff15d91fc49bf530b29574dbdc4db32ba7def317580dccac
    Size: 149.74 kB
  9. mod_ldap-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: 813ac4da9d5f690614eb5b7c9a6a67ed
    SHA-256: 396aa1ccc5d6199407be08cce399820c1c3fdfd1e93eb238477a3bba6666c909
    Size: 91.54 kB
  10. mod_md-2.0.8-8.module+el8+1988+202d1f93.2.x86_64.rpm
    MD5: bebcd346a3d501e47128e0347ba21902
    SHA-256: 107ee95735d2e348078fc8de246dbbb330ed92cd194b72b8ea57bd066999d371
    Size: 183.58 kB
  11. mod_md-debugsource-2.0.8-8.module+el8+1988+202d1f93.2.x86_64.rpm
    MD5: d0b069c45912234b6af1c258251e0e27
    SHA-256: 8cd85f4db0a99ecb0d7971273ae2fe2faa2d5cf3f59c27bc9f012bd1501cfe1b
    Size: 126.48 kB
  12. mod_proxy_html-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: d0c6856e35cfb4dcd0b96d46103111a2
    SHA-256: 7af51057ac5f1658e0af244c08efe9bf718e37934d798222407e32b06fe1c254
    Size: 68.74 kB
  13. mod_session-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: 8ef808aab6a05c548d5a83caddd55f1e
    SHA-256: 06c0902c3bb2cf04c02231480ca029bc779d08e068cb953fd1b63210715ea642
    Size: 80.32 kB
  14. mod_ssl-2.4.37-65.module+el8+1988+202d1f93.8.ML.1.x86_64.rpm
    MD5: 7b6cf82516eb0e01365db8dd7faf4743
    SHA-256: 61b15e6f4fb3b83a3df86c11b7f4ff8efccde362bfe35aa9bf22a5b20a8cf3e5
    Size: 143.70 kB