Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
Red Hat Apache web server could experience stability issues
published 8 days ago
Summary
The Red Hat Apache (httpd) packages, including core and debugging versions, contain bugs that may affect the server's reliability. Updating to the latest packages fixes these problems and adds enhancements. Apply the provided update as soon as possible to keep your web services running smoothly.
What to do
- Update redhat httpd to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-core to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-core-debuginfo to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-debuginfo to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-debugsource to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-devel to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-filesystem to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-manual to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-tools to version 0:2.4.63-13.el10_2.5.
- Update redhat httpd-tools-debuginfo to version 0:2.4.63-13.el10_2.5.
- Update redhat mod_ldap to version 0:2.4.63-13.el10_2.5.
- Update redhat mod_ldap-debuginfo to version 0:2.4.63-13.el10_2.5.
- Update redhat mod_lua to version 0:2.4.63-13.el10_2.5.
- Update redhat mod_lua-debuginfo to version 0:2.4.63-13.el10_2.5.
- Update redhat mod_proxy_html to version 1:2.4.63-13.el10_2.5.
- Update redhat mod_proxy_html-debuginfo to version 1:2.4.63-13.el10_2.5.
- Update redhat mod_session to version 0:2.4.63-13.el10_2.5.
- Update redhat mod_session-debuginfo to version 0:2.4.63-13.el10_2.5.
- Update redhat mod_ssl to version 1:2.4.63-13.el10_2.5.
- Update redhat mod_ssl-debuginfo to version 1:2.4.63-13.el10_2.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:10.2 | redhat | httpd |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-core |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-core-debuginfo |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-debuginfo |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-debugsource |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-devel |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-filesystem |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-manual |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-tools |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | httpd-tools-debuginfo |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_ldap |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_ldap-debuginfo |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_lua |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_lua-debuginfo |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_proxy_html |
< 1:2.4.63-13.el10_2.5 Fix: upgrade to 1:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_proxy_html-debuginfo |
< 1:2.4.63-13.el10_2.5 Fix: upgrade to 1:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_session |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_session-debuginfo |
< 0:2.4.63-13.el10_2.5 Fix: upgrade to 0:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_ssl |
< 1:2.4.63-13.el10_2.5 Fix: upgrade to 1:2.4.63-13.el10_2.5
|
| Red Hat:enterprise_linux:10.2 | redhat | mod_ssl-debuginfo |
< 1:2.4.63-13.el10_2.5 Fix: upgrade to 1:2.4.63-13.el10_2.5
|
Original advisory text
Red Hat Bug Fix Advisory: httpd bug fix and enhancement update
References
- https://access.redhat.com/errata/RHBA-2026:50158 Vendor Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_50158.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56449 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2544778 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56449 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56449 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2026/10/01/18 Third Party Advisory
- https://httpd.apache.org/security/vulnerabilities_24.html Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published10 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
RHBA-2026:50158 · OSV
Track software like this
Free during beta