ELSA-2026-30845

Опубликовано: 16 июл. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2026-30845: mod_md security update (MODERATE)

[1:2.4.26-5.1]

Resolves: RHEL-175647 - mod_md: OCSP response limits (CVE-2026-29168)

[1:2.4.26-5]

Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)

[1:2.4.26-3]

Bump release for October 2024 mass rebuild: Resolves: RHEL-64018

[1:2.4.26-2]

Bump release for June 2024 mass rebuild

[1:2.4.26-1]

update to 2.4.26

[1:2.4.25-3]

Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.4.25-2]

Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.4.25-1]

update to 2.4.25

[1:2.4.24-1]

new version 2.4.24

[1:2.4.21-2]

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

mod_md

2.4.26-5.el10_2.1

Oracle Linux x86_64

mod_md

2.4.26-5.el10_2.1

Связанные CVE

CVE-2026-29168

Ссылки на источники

Связанные уязвимости

CVE-2026-29168

CVSS3: 7.3

ubuntu

3 месяца назад

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.