{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Critical" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"httpd security update", "category":"general", "title":"Synopsis" }, { "text":"An update for httpd is now available for openEuler-24.03-LTS-SP3", "category":"general", "title":"Summary" }, { "text":"Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.\n\nSecurity Fix(es):\n\nUse After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)\n\nA cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)\n\nA buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)\n\nA path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)\n\nOut-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.(CVE-2026-43951)\n\nImproper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nThis issue affects Apache HTTP Server: from through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)\n\nLoop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.\n\nThis issue affects undefined: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)\n\nBuffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)\n\nUse After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.(CVE-2026-48913)", "category":"general", "title":"Description" }, { "text":"An update for httpd is now available for openEuler-24.03-LTS-SP3.\n\nopenEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Critical", "category":"general", "title":"Severity" }, { "text":"httpd", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-2747", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" }, { "summary":"CVE-2026-29167", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-29167&packageName=httpd" }, { "summary":"CVE-2026-29170", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-29170&packageName=httpd" }, { "summary":"CVE-2026-34355", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-34355&packageName=httpd" }, { "summary":"CVE-2026-34356", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-34356&packageName=httpd" }, { "summary":"CVE-2026-42535", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-42535&packageName=httpd" }, { "summary":"CVE-2026-42536", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-42536&packageName=httpd" }, { "summary":"CVE-2026-43951", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-43951&packageName=httpd" }, { "summary":"CVE-2026-44119", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-44119&packageName=httpd" }, { "summary":"CVE-2026-44186", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-44186&packageName=httpd" }, { "summary":"CVE-2026-44631", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-44631&packageName=httpd" }, { "summary":"CVE-2026-48913", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-48913&packageName=httpd" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29167" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29170" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34355" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34356" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42535" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42536" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43951" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44119" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44186" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44631" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48913" }, { "summary":"openEuler-SA-2026-2747 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-2747.json" } ], "title":"An update for httpd is now available for openEuler-24.03-LTS-SP3", "tracking":{ "initial_release_date":"2026-06-30T20:09:21+08:00", "revision_history":[ { "date":"2026-06-30T20:09:21+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-06-30T20:09:21+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-06-30T20:09:21+08:00", "id":"openEuler-SA-2026-2747", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" } ], "category":"product_name" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"httpd-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"httpd-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-debugsource-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"httpd-debugsource-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"httpd-debugsource-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-devel-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"httpd-devel-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"httpd-devel-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-tools-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"httpd-tools-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"httpd-tools-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_ldap-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"mod_ldap-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"mod_ldap-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_md-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"mod_md-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"mod_md-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_proxy_html-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"mod_proxy_html-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"mod_proxy_html-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_session-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"mod_session-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"mod_session-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_ssl-2.4.58-20.oe2403sp3.x86_64.rpm", "name":"mod_ssl-2.4.58-20.oe2403sp3.x86_64.rpm" }, "name":"mod_ssl-2.4.58-20.oe2403sp3.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-filesystem-2.4.58-20.oe2403sp3.noarch.rpm", "name":"httpd-filesystem-2.4.58-20.oe2403sp3.noarch.rpm" }, "name":"httpd-filesystem-2.4.58-20.oe2403sp3.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-help-2.4.58-20.oe2403sp3.noarch.rpm", "name":"httpd-help-2.4.58-20.oe2403sp3.noarch.rpm" }, "name":"httpd-help-2.4.58-20.oe2403sp3.noarch.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"httpd-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"httpd-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-debugsource-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"httpd-debugsource-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"httpd-debugsource-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-devel-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"httpd-devel-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"httpd-devel-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-tools-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"httpd-tools-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"httpd-tools-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_ldap-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"mod_ldap-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"mod_ldap-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_md-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"mod_md-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"mod_md-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_proxy_html-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"mod_proxy_html-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"mod_proxy_html-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_session-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"mod_session-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"mod_session-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mod_ssl-2.4.58-20.oe2403sp3.aarch64.rpm", "name":"mod_ssl-2.4.58-20.oe2403sp3.aarch64.rpm" }, "name":"mod_ssl-2.4.58-20.oe2403sp3.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"httpd-2.4.58-20.oe2403sp3.src.rpm", "name":"httpd-2.4.58-20.oe2403sp3.src.rpm" }, "name":"httpd-2.4.58-20.oe2403sp3.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "name":"httpd-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "name":"httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-debugsource-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "name":"httpd-debugsource-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-devel-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "name":"httpd-devel-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-tools-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "name":"httpd-tools-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_ldap-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "name":"mod_ldap-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_md-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "name":"mod_md-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_proxy_html-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "name":"mod_proxy_html-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_session-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "name":"mod_session-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_ssl-2.4.58-20.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "name":"mod_ssl-2.4.58-20.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-filesystem-2.4.58-20.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "name":"httpd-filesystem-2.4.58-20.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-help-2.4.58-20.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "name":"httpd-help-2.4.58-20.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "name":"httpd-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "name":"httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-debugsource-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "name":"httpd-debugsource-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-devel-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "name":"httpd-devel-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-tools-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "name":"httpd-tools-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_ldap-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "name":"mod_ldap-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_md-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "name":"mod_md-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_proxy_html-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "name":"mod_proxy_html-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_session-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "name":"mod_session-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mod_ssl-2.4.58-20.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "name":"mod_ssl-2.4.58-20.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"httpd-2.4.58-20.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src", "name":"httpd-2.4.58-20.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-29167", "notes":[ { "text":"Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-29167" }, { "cve":"CVE-2026-29170", "notes":[ { "text":"A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.1, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-29170" }, { "cve":"CVE-2026-34355", "notes":[ { "text":"A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-34355" }, { "cve":"CVE-2026-34356", "notes":[ { "text":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-34356" }, { "cve":"CVE-2026-42535", "notes":[ { "text":"A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.1, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-42535" }, { "cve":"CVE-2026-42536", "notes":[ { "text":"Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-42536" }, { "cve":"CVE-2026-43951", "notes":[ { "text":"Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-43951" }, { "cve":"CVE-2026-44119", "notes":[ { "text":"Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nThis issue affects Apache HTTP Server: from through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-44119" }, { "cve":"CVE-2026-44186", "notes":[ { "text":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.\n\nThis issue affects undefined: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-44186" }, { "cve":"CVE-2026-44631", "notes":[ { "text":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-44631" }, { "cve":"CVE-2026-48913", "notes":[ { "text":"Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ], "details":"httpd security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:httpd-filesystem-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-help-2.4.58-20.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debuginfo-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-debugsource-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-devel-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-tools-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ldap-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_md-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_proxy_html-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_session-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mod_ssl-2.4.58-20.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:httpd-2.4.58-20.oe2403sp3.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-48913" } ] }