{"id":"CVE-2026-44631","aliases":["ALPINE-CVE-2026-44631","ALSA-2026:34109","ALSA-2026:41906","ALSA-2026:42828","AZL-89735","BELL-CVE-2026-44631","BIT-apache-2026-44631","CLSA-2026-1782212784","CLSA-2026-1782293598","CLSA-2026-1782293864","CLSA-2026-1782978404","CLSA-2026-1782980275","CLSA-2026-1782980618","CLSA-2026-1782987076","CLSA-2026-1783529026","DEBIAN-CVE-2026-44631","EUVD-2026-35095","GHSA-9jv8-9586-5r34","MGASA-2026-0289","OESA-2026-2744","OESA-2026-2745","OESA-2026-2746","OESA-2026-2747","RHSA-2026:25042","RHSA-2026:34109","RHSA-2026:41906","RHSA-2026:42828","RHSA-2026:47046","RHSA-2026:56868","RHSA-2026:62165","RHSA-2026:66323","RHSA-2026:67152","RLSA-2026:34109","RLSA-2026:41906","RLSA-2026:42828","ROOT-OS-DEBIAN-12-CVE-2026-44631","ROOT-OS-DEBIAN-13-CVE-2026-44631","SUSE-SU-2026:22564-1","SUSE-SU-2026:2686-1","SUSE-SU-2026:2717-1","SUSE-SU-2026:2735-1","SUSE-SU-2026:2759-1","UBUNTU-CVE-2026-44631","USN-8516-1","USN-8571-1","openSUSE-SU-2026:21235-1"],"status":"published","title":"Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00504,"percentile":0.43446,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-124"],"published":"2026-06-08T15:19:23Z","modified":"2026-11-05T21:32:23Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"apache2","fixed_in":["2.4.68-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"apache2","fixed_in":["2.4.68-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"apache2","fixed_in":["2.4.68-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"apache2","fixed_in":["2.4.68-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"httpd","fixed_in":["2.4.68-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"apache2","fixed_in":["2.4.68-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"apache2","fixed_in":["2.4.68-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"apache2","fixed_in":["2.4.68-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"apache","fixed_in":["2.4.68"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-core","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-devel","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-filesystem","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-manual","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-tools","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_ldap","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_lua","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_proxy_html","fixed_in":["1:2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_session","fixed_in":["2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_ssl","fixed_in":["1:2.4.53-11.el9_2.5.tuxcare.els20"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-bin","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-data","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-dev","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-doc","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-ssl-dev","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-custom","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-pristine","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-utils","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-md","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-proxy-uwsgi","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-bin","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-data","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-dev","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-doc","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-ssl-dev","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-custom","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-pristine","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-utils","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-md","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-proxy-uwsgi","fixed_in":["2.4.59-1~deb10u1+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.4.68-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.4.68-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.4.68-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","fixed_in":["2.4.18-2ubuntu3.17+esm19"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"apache2","fixed_in":["2.4.29-1ubuntu4.27+esm10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"apache2","fixed_in":["2.4.41-4ubuntu3.23+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"apache2","fixed_in":["2.4.52-1ubuntu4.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"apache2","fixed_in":["2.4.58-1ubuntu8.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"apache2","fixed_in":["2.4.66-2ubuntu2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:10","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-13.el10_2.4"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-13.el9_8.5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-10.module_el8.10.0+4233+8b7d9181.7"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.10.0+4088+57f011c1.2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-65.module_el8.10.0+4233+8b7d9181.9"}]}],"bundled":10},{"source":"osv","ecosystem":"Azure Linux:3","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.54-r2"},{"fixed":"2.4.68-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.63-r0"},{"fixed":"2.4.68-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.56-r0"},{"fixed":"2.4.68-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"apache","ranges":[{"type":"SEMVER","events":[{"introduced":"2.4.0"},{"fixed":"2.4.68"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-11.el9_2.5.tuxcare.els20"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-ssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-proxy-uwsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2429+d3e3ecd8.tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-64.module_el8+2438+d0b58708.tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2439+df3a5201.1.tuxcare.els21"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-ssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-ssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-proxy-uwsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-1~deb12u1"}]}],"versions":["2.4.57-2","2.4.57-3","2.4.58-1","2.4.59-1","2.4.59-1~deb10u1","2.4.59-1~deb11u1","2.4.59-1~deb12u1","2.4.59-2","2.4.60-1","2.4.61-1","2.4.61-1~deb11u1","2.4.61-1~deb12u1","2.4.62-1","2.4.62-1~deb11u1","2.4.62-1~deb11u2","2.4.62-1~deb12u1","2.4.62-1~deb12u2","2.4.62-2","2.4.62-3","2.4.62-4","2.4.62-5","2.4.62-6","2.4.63-1","2.4.64-1","2.4.65-1","2.4.65-1~deb11u1","2.4.65-1~deb12u1","2.4.65-2","2.4.65-3","2.4.66-1","2.4.66-1~deb11u1","2.4.66-1~deb12u1","2.4.66-1~deb12u2","2.4.66-1~deb13u1","2.4.66-1~deb13u2","2.4.66-2","2.4.66-3","2.4.66-4","2.4.66-5","2.4.66-6","2.4.66-7","2.4.66-8","2.4.67-1","2.4.67-1~deb11u1","2.4.67-1~deb11u2","2.4.67-1~deb11u3","2.4.67-1~deb12u1","2.4.67-1~deb12u2","2.4.67-1~deb12u3","2.4.67-1~deb13u1","2.4.67-1~deb13u2","2.4.67-1~deb13u3","2.4.67-2"]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-1~deb13u1"}]}],"versions":["2.4.65-2","2.4.65-3","2.4.66-1","2.4.66-1~deb11u1","2.4.66-1~deb12u1","2.4.66-1~deb12u2","2.4.66-1~deb13u1","2.4.66-1~deb13u2","2.4.66-2","2.4.66-3","2.4.66-4","2.4.66-5","2.4.66-6","2.4.66-7","2.4.66-8","2.4.67-1","2.4.67-1~deb11u1","2.4.67-1~deb11u2","2.4.67-1~deb11u3","2.4.67-1~deb12u1","2.4.67-1~deb12u2","2.4.67-1~deb12u3","2.4.67-1~deb13u1","2.4.67-1~deb13u2","2.4.67-1~deb13u3","2.4.67-2","2.4.68-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-1"}]}],"versions":["2.4.65-2","2.4.65-3","2.4.66-1","2.4.66-1~deb11u1","2.4.66-1~deb12u1","2.4.66-1~deb12u2","2.4.66-1~deb13u1","2.4.66-1~deb13u2","2.4.66-2","2.4.66-3","2.4.66-4","2.4.66-5","2.4.66-6","2.4.66-7","2.4.66-8","2.4.67-1","2.4.67-1~deb11u1","2.4.67-1~deb11u2","2.4.67-1~deb11u3","2.4.67-1~deb12u1","2.4.67-1~deb12u2","2.4.67-1~deb12u3","2.4.67-1~deb13u1","2.4.67-1~deb13u2","2.4.67-1~deb13u3","2.4.67-2","2.4.68-1~deb12u1","2.4.68-1~deb13u1"]},{"source":"osv","ecosystem":"Mageia:10","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-1.mga10"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:9","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-1.mga9"}]}],"bundled":13},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-37.oe2003sp4"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-33.oe2203sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-20.oe2403sp1"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-20.oe2403sp3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.68-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.68-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.68-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.68-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.68-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.68-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_lua-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-13.el10_2.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_lua-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+24521+219dcfc5.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+24521+219dcfc5.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+24521+219dcfc5.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-65.module+el8.10.0+24521+219dcfc5.9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_lua-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.63-1.el10_0.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-16.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.29-13.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.29-13.el8jbcs"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_lua-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.62-4.el9_6.6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-11.el9_4.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-11.el9_4.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-11.el9_4.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-11.el9_4.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-11.el9_4.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-11.el9_2.15"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-11.el9_2.15"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.53-11.el9_2.15"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-11.el9_2.15"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.53-11.el9_2.15"}]}],"bundled":15},{"source":"osv","ecosystem":"Rocky Linux:10","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.63-13.el10_2.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.62-13.el9_8.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+1984+1bed3124.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+40206+be2c8a50.8"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+40053+5a18018e.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+1830+22f0c9e0"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+1840+b070a976.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-65.module+el8.10.0+40197+0231e209.8"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+40204+716978aa.6"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+1775+6b057638"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+1830+22f0c9e0"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+40197+0231e209.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.10.0+40053+5a18018e.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.9.0+1370+89cc8ad5"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.81.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"apache2-tls13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.81.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.81.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"apache2-tls13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.81.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150600.5.55.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150700.4.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150700.4.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150700.4.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150700.4.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150700.4.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150700.4.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150700.4.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm19"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1","2.4.18-2ubuntu3.17+esm2","2.4.18-2ubuntu3.17+esm3","2.4.18-2ubuntu3.17+esm4","2.4.18-2ubuntu3.17+esm5","2.4.18-2ubuntu3.17+esm6","2.4.18-2ubuntu3.17+esm7","2.4.18-2ubuntu3.17+esm8","2.4.18-2ubuntu3.17+esm9","2.4.18-2ubuntu3.17+esm10","2.4.18-2ubuntu3.17+esm11","2.4.18-2ubuntu3.17+esm12","2.4.18-2ubuntu3.17+esm13","2.4.18-2ubuntu3.17+esm14","2.4.18-2ubuntu3.17+esm16","2.4.18-2ubuntu3.17+esm17","2.4.18-2ubuntu3.17+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+esm10"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16","2.4.29-1ubuntu4.17","2.4.29-1ubuntu4.18","2.4.29-1ubuntu4.19","2.4.29-1ubuntu4.20","2.4.29-1ubuntu4.21","2.4.29-1ubuntu4.22","2.4.29-1ubuntu4.23","2.4.29-1ubuntu4.24","2.4.29-1ubuntu4.25","2.4.29-1ubuntu4.26","2.4.29-1ubuntu4.27","2.4.29-1ubuntu4.27+esm1","2.4.29-1ubuntu4.27+esm2","2.4.29-1ubuntu4.27+esm3","2.4.29-1ubuntu4.27+esm4","2.4.29-1ubuntu4.27+esm6","2.4.29-1ubuntu4.27+esm7","2.4.29-1ubuntu4.27+esm8","2.4.29-1ubuntu4.27+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+esm5"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4","2.4.41-4ubuntu3.5","2.4.41-4ubuntu3.6","2.4.41-4ubuntu3.7","2.4.41-4ubuntu3.8","2.4.41-4ubuntu3.9","2.4.41-4ubuntu3.10","2.4.41-4ubuntu3.11","2.4.41-4ubuntu3.12","2.4.41-4ubuntu3.13","2.4.41-4ubuntu3.14","2.4.41-4ubuntu3.15","2.4.41-4ubuntu3.16","2.4.41-4ubuntu3.17","2.4.41-4ubuntu3.19","2.4.41-4ubuntu3.20","2.4.41-4ubuntu3.21","2.4.41-4ubuntu3.23","2.4.41-4ubuntu3.23+esm2","2.4.41-4ubuntu3.23+esm3","2.4.41-4ubuntu3.23+esm4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1ubuntu4.23"}]}],"versions":["2.4.48-3.1ubuntu3","2.4.48-3.1ubuntu4","2.4.51-2ubuntu1","2.4.52-1ubuntu1","2.4.52-1ubuntu2","2.4.52-1ubuntu4","2.4.52-1ubuntu4.1","2.4.52-1ubuntu4.2","2.4.52-1ubuntu4.3","2.4.52-1ubuntu4.4","2.4.52-1ubuntu4.5","2.4.52-1ubuntu4.6","2.4.52-1ubuntu4.7","2.4.52-1ubuntu4.8","2.4.52-1ubuntu4.9","2.4.52-1ubuntu4.10","2.4.52-1ubuntu4.11","2.4.52-1ubuntu4.12","2.4.52-1ubuntu4.13","2.4.52-1ubuntu4.14","2.4.52-1ubuntu4.15","2.4.52-1ubuntu4.16","2.4.52-1ubuntu4.18","2.4.52-1ubuntu4.19","2.4.52-1ubuntu4.20","2.4.52-1ubuntu4.21"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1ubuntu8.15"}]}],"versions":["2.4.57-2ubuntu2","2.4.57-2ubuntu3","2.4.58-1ubuntu1","2.4.58-1ubuntu2","2.4.58-1ubuntu6","2.4.58-1ubuntu7","2.4.58-1ubuntu8","2.4.58-1ubuntu8.1","2.4.58-1ubuntu8.2","2.4.58-1ubuntu8.3","2.4.58-1ubuntu8.4","2.4.58-1ubuntu8.5","2.4.58-1ubuntu8.6","2.4.58-1ubuntu8.7","2.4.58-1ubuntu8.8","2.4.58-1ubuntu8.10","2.4.58-1ubuntu8.11","2.4.58-1ubuntu8.12","2.4.58-1ubuntu8.13"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.63-1ubuntu1","2.4.63-1ubuntu3","2.4.64-1ubuntu2","2.4.64-1ubuntu3","2.4.64-1ubuntu3.2","2.4.64-1ubuntu3.3","2.4.64-1ubuntu3.4","2.4.64-1ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-2ubuntu2.4"}]}],"versions":["2.4.64-1ubuntu3","2.4.65-3ubuntu1","2.4.66-2ubuntu1","2.4.66-2ubuntu2","2.4.66-2ubuntu2.1","2.4.66-2ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1ubuntu4.23"}]}],"versions":["2.4.48-3.1ubuntu3","2.4.48-3.1ubuntu4","2.4.51-2ubuntu1","2.4.52-1ubuntu1","2.4.52-1ubuntu2","2.4.52-1ubuntu4","2.4.52-1ubuntu4.1","2.4.52-1ubuntu4.2","2.4.52-1ubuntu4.3","2.4.52-1ubuntu4.4","2.4.52-1ubuntu4.5","2.4.52-1ubuntu4.6","2.4.52-1ubuntu4.7","2.4.52-1ubuntu4.8","2.4.52-1ubuntu4.9","2.4.52-1ubuntu4.10","2.4.52-1ubuntu4.11","2.4.52-1ubuntu4.12","2.4.52-1ubuntu4.13","2.4.52-1ubuntu4.14","2.4.52-1ubuntu4.15","2.4.52-1ubuntu4.16","2.4.52-1ubuntu4.18","2.4.52-1ubuntu4.19","2.4.52-1ubuntu4.20","2.4.52-1ubuntu4.21"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1ubuntu8.15"}]}],"versions":["2.4.57-2ubuntu2","2.4.57-2ubuntu3","2.4.58-1ubuntu1","2.4.58-1ubuntu2","2.4.58-1ubuntu6","2.4.58-1ubuntu7","2.4.58-1ubuntu8","2.4.58-1ubuntu8.1","2.4.58-1ubuntu8.2","2.4.58-1ubuntu8.3","2.4.58-1ubuntu8.4","2.4.58-1ubuntu8.5","2.4.58-1ubuntu8.6","2.4.58-1ubuntu8.7","2.4.58-1ubuntu8.8","2.4.58-1ubuntu8.10","2.4.58-1ubuntu8.11","2.4.58-1ubuntu8.12","2.4.58-1ubuntu8.13"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-2ubuntu2.4"}]}],"versions":["2.4.64-1ubuntu3","2.4.65-3ubuntu1","2.4.66-2ubuntu1","2.4.66-2ubuntu2","2.4.66-2ubuntu2.1","2.4.66-2ubuntu2.2"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.22+esm14"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15","2.4.7-1ubuntu4.16","2.4.7-1ubuntu4.17","2.4.7-1ubuntu4.18","2.4.7-1ubuntu4.19","2.4.7-1ubuntu4.20","2.4.7-1ubuntu4.21","2.4.7-1ubuntu4.22","2.4.7-1ubuntu4.22+esm1","2.4.7-1ubuntu4.22+esm2","2.4.7-1ubuntu4.22+esm3","2.4.7-1ubuntu4.22+esm4","2.4.7-1ubuntu4.22+esm5","2.4.7-1ubuntu4.22+esm6","2.4.7-1ubuntu4.22+esm8","2.4.7-1ubuntu4.22+esm9","2.4.7-1ubuntu4.22+esm10","2.4.7-1ubuntu4.22+esm12","2.4.7-1ubuntu4.22+esm13"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm19"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1","2.4.18-2ubuntu3.17+esm2","2.4.18-2ubuntu3.17+esm3","2.4.18-2ubuntu3.17+esm4","2.4.18-2ubuntu3.17+esm5","2.4.18-2ubuntu3.17+esm6","2.4.18-2ubuntu3.17+esm7","2.4.18-2ubuntu3.17+esm8","2.4.18-2ubuntu3.17+esm9","2.4.18-2ubuntu3.17+esm10","2.4.18-2ubuntu3.17+esm11","2.4.18-2ubuntu3.17+esm12","2.4.18-2ubuntu3.17+esm13","2.4.18-2ubuntu3.17+esm14","2.4.18-2ubuntu3.17+esm16","2.4.18-2ubuntu3.17+esm17","2.4.18-2ubuntu3.17+esm18"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+esm10"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16","2.4.29-1ubuntu4.17","2.4.29-1ubuntu4.18","2.4.29-1ubuntu4.19","2.4.29-1ubuntu4.20","2.4.29-1ubuntu4.21","2.4.29-1ubuntu4.22","2.4.29-1ubuntu4.23","2.4.29-1ubuntu4.24","2.4.29-1ubuntu4.25","2.4.29-1ubuntu4.26","2.4.29-1ubuntu4.27","2.4.29-1ubuntu4.27+esm1","2.4.29-1ubuntu4.27+esm2","2.4.29-1ubuntu4.27+esm3","2.4.29-1ubuntu4.27+esm4","2.4.29-1ubuntu4.27+esm6","2.4.29-1ubuntu4.27+esm7","2.4.29-1ubuntu4.27+esm8","2.4.29-1ubuntu4.27+esm9"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+esm5"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4","2.4.41-4ubuntu3.5","2.4.41-4ubuntu3.6","2.4.41-4ubuntu3.7","2.4.41-4ubuntu3.8","2.4.41-4ubuntu3.9","2.4.41-4ubuntu3.10","2.4.41-4ubuntu3.11","2.4.41-4ubuntu3.12","2.4.41-4ubuntu3.13","2.4.41-4ubuntu3.14","2.4.41-4ubuntu3.15","2.4.41-4ubuntu3.16","2.4.41-4ubuntu3.17","2.4.41-4ubuntu3.19","2.4.41-4ubuntu3.20","2.4.41-4ubuntu3.21","2.4.41-4ubuntu3.23","2.4.41-4ubuntu3.23+esm2","2.4.41-4ubuntu3.23+esm3","2.4.41-4ubuntu3.23+esm4"],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.3.1"}]}],"bundled":13}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"apache software foundation","product":"apache http server"}],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["vendor-advisory","Vendor Advisory","advisory","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/06/08/14","tags":["Mailing List","Third Party Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44631","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-9jv8-9586-5r34"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-44631","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34109","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-42516","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-29169","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34355","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34356","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42536","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44185","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44631","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374549","tags":["report"]},{"url":"https://bugzilla.redhat.com/2465296","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486395","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486397","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486399","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486411","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486414","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-34109.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-24072.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-33006.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-42535.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-43951.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-44119.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-44186.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41906","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24072","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33006","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42535","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43951","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44119","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44186","tags":["report"]},{"url":"https://bugzilla.redhat.com/2464941","tags":["report"]},{"url":"https://bugzilla.redhat.com/2465293","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486402","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486406","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486415","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486416","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-41906.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42828","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-42828.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-44631","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782212784.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1782293598.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44186","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1782293864.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1782978404.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43951","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1782980275.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1782980618.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1782987076.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1783529026.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44631.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-44631","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0289.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35625","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/03/3","tags":["web"]},{"url":"https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb","tags":["web","article"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00234.html","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/4","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/5","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/6","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/7","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/8","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/9","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/10","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/11","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/12","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/13","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/14","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/15","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/08/16","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7R2KWQ6IEDZQHPWK66QN6DG4LW6X3OUM/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2744","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42536","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2745","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48913","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2747","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25042","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49975","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48913","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-29167","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-29170","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25042.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486394","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-29167","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-29170","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486414","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34355","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486395","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34356","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42535","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486411","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42536","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486415","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43951","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44119","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44185","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486402","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44186","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486399","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44631","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48913","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485371","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-007","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49975","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2465296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34109.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-42516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42516","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464941","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24072","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-29169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29169","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2465293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33006","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41906.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42828.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47046","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2465299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466913","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47046.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28780","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28780","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33007","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33007","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33857","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34032","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34059","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56868","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_5_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374553","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56868.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-43204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-43204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43204","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62165","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62165.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:66323","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66323.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67152","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67152.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:34109","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:41906","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:42828","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622564-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267503","tags":["report"]},{"url":"https://bugzilla.suse.com/1267955","tags":["report"]},{"url":"https://bugzilla.suse.com/1267956","tags":["report"]},{"url":"https://bugzilla.suse.com/1267962","tags":["report"]},{"url":"https://bugzilla.suse.com/1267963","tags":["report"]},{"url":"https://bugzilla.suse.com/1267965","tags":["report"]},{"url":"https://bugzilla.suse.com/1267969","tags":["report"]},{"url":"https://bugzilla.suse.com/1267970","tags":["report"]},{"url":"https://bugzilla.suse.com/1267971","tags":["report"]},{"url":"https://bugzilla.suse.com/1267972","tags":["report"]},{"url":"https://bugzilla.suse.com/1267976","tags":["report"]},{"url":"https://bugzilla.suse.com/1267977","tags":["report"]},{"url":"https://bugzilla.suse.com/1267978","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49975","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262686-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207327","tags":["report"]},{"url":"https://bugzilla.suse.com/1208708","tags":["report"]},{"url":"https://bugzilla.suse.com/1214357","tags":["report"]},{"url":"https://bugzilla.suse.com/1263935","tags":["report"]},{"url":"https://bugzilla.suse.com/1263950","tags":["report"]},{"url":"https://bugzilla.suse.com/1263951","tags":["report"]},{"url":"https://bugzilla.suse.com/1263952","tags":["report"]},{"url":"https://bugzilla.suse.com/1263953","tags":["report"]},{"url":"https://bugzilla.suse.com/1263954","tags":["report"]},{"url":"https://bugzilla.suse.com/1263955","tags":["report"]},{"url":"https://bugzilla.suse.com/1263956","tags":["report"]},{"url":"https://bugzilla.suse.com/1263957","tags":["report"]},{"url":"https://bugzilla.suse.com/1264150","tags":["report"]},{"url":"https://bugzilla.suse.com/1264163","tags":["report"]},{"url":"https://bugzilla.suse.com/690734","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-20001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34059","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262717-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262735-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262759-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-44631","tags":["report"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-44631","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8516-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8571-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-29167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-29170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-44119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-44185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-44186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-48913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-49975","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-44631","title":"Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T15:19:23.57Z","modified":"2026-06-08T22:32:33.325Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-124"],"updated_at":"2026-11-02T13:43:00.288193Z"}],"euvd":[{"id":"EUVD-2026-35095","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T15:19:23Z","modified":"2026-06-08T22:32:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:48.375828Z"}],"ghsa":[{"id":"GHSA-9jv8-9586-5r34","title":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the...","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T18:31:49Z","modified":"2026-06-22T05:06:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-124"],"updated_at":"2026-11-02T15:08:55.672723Z"}],"nvd":[{"id":"CVE-2026-44631","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T16:16:40.583Z","modified":"2026-07-23T07:10:00.113Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-124"],"updated_at":"2026-11-02T14:12:22.73178Z"}],"osv":[{"id":"ALPINE-CVE-2026-44631","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T16:16:40.583Z","modified":"2026-10-01T02:17:49.307968632Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-44631","status":"published","published":"2026-06-11T06:11:57.842366Z","modified":"2026-06-23T07:15:04.397342743Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:24.12174Z"},{"id":"CVE-2026-44631","title":"Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T15:19:23.57Z","modified":"2026-11-05T21:32:23.426479695Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-124"],"updated_at":"2026-11-05T22:00:34.245765Z"},{"id":"DEBIAN-CVE-2026-44631","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.  This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.  Users are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T16:16:40.583Z","modified":"2026-10-01T03:03:23.6712805Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:55.669088Z"},{"id":"OESA-2026-2744","title":"httpd security update","description":"Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)\n\nA cross-site scripting vulnerability exists in mod_proxy_ftp\u0026apos;s HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)\n\nA buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)\n\nA path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)\n\nLoop with Unreachable Exit Condition (\u0026apos;Infinite Loop\u0026apos;) vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.\n\nThis issue affects undefined: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)\n\nBuffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)","status":"published","published":"2026-06-24T11:11:40Z","modified":"2026-08-18T01:21:09.233936413Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2745","title":"httpd security update","description":"Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)\n\nA cross-site scripting vulnerability exists in mod_proxy_ftp\u0026apos;s HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)\n\nA buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)\n\nA path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)\n\nImproper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nThis issue affects Apache HTTP Server: from through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)\n\nLoop with Unreachable Exit Condition (\u0026apos;Infinite Loop\u0026apos;) vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.\n\nThis issue affects undefined: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)\n\nBuffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)","status":"published","published":"2026-06-24T11:11:40Z","modified":"2026-08-18T01:21:11.284307717Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2746","title":"httpd security update","description":"Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)\n\nA cross-site scripting vulnerability exists in mod_proxy_ftp\u0026apos;s HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)\n\nA buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)\n\nA path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)\n\nOut-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.(CVE-2026-43951)\n\nImproper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nThis issue affects Apache HTTP Server: from through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)\n\nLoop with Unreachable Exit Condition (\u0026apos;Infinite Loop\u0026apos;) vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.\n\nThis issue affects undefined: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)\n\nBuffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)\n\nUse After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.(CVE-2026-48913)","status":"published","published":"2026-06-24T11:11:40Z","modified":"2026-08-18T01:21:09.050269946Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2747","title":"httpd security update","description":"Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-29167)\n\nA cross-site scripting vulnerability exists in mod_proxy_ftp\u0026apos;s HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-29170)\n\nA buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-34355)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie*\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-34356)\n\nA path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes this issue.(CVE-2026-42535)\n\nHeap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-42536)\n\nOut-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.(CVE-2026-43951)\n\nImproper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nThis issue affects Apache HTTP Server: from through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119)\n\nLoop with Unreachable Exit Condition (\u0026apos;Infinite Loop\u0026apos;) vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.\n\nThis issue affects undefined: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44186)\n\nBuffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44631)\n\nUse After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.(CVE-2026-48913)","status":"published","published":"2026-06-24T11:11:40Z","modified":"2026-08-18T01:21:11.152345206Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:25042","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-06-11T10:09:03Z","modified":"2026-10-15T10:15:39Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:34109","title":"Red Hat Security Advisory: httpd security, bug fix, and enhancement update","status":"published","published":"2026-07-02T10:17:32Z","modified":"2026-10-15T10:17:12Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:41906","title":"Red Hat Security Advisory: httpd security, bug fix, and enhancement update","status":"published","published":"2026-07-23T10:13:45Z","modified":"2026-10-15T10:19:01Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:42828","title":"Red Hat Security Advisory: httpd:2.4 security, bug fix, and enhancement update","status":"published","published":"2026-07-23T10:14:14Z","modified":"2026-10-15T10:19:21Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:47046","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2026-07-29T10:11:28Z","modified":"2026-10-15T10:19:53Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:56868","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update","status":"published","published":"2026-08-27T10:15:14Z","modified":"2026-10-15T10:33:21.03518951Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:62165","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2026-09-02T10:22:22Z","modified":"2026-10-15T10:23:07Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:66323","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2026-09-11T10:15:00Z","modified":"2026-10-15T10:24:01Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:67152","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2026-09-14T10:10:17Z","modified":"2026-10-15T10:24:18Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:34109","title":"Important: httpd security, bug fix, and enhancement update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)\n\n* httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)\n\n* httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)\n\n* httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)\n\n* httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)\n\n* httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)\n\n* httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)\n\nBug Fix(es) and Enhancement(s):\n\n* address Moderate severity issues from httpd 2.4.68 [rhel-10.2.z] (JIRA:Rocky Linux-184518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-07T12:05:23.118123Z","modified":"2026-07-07T12:30:04.86179333Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:41906","title":"Important: httpd security, bug fix, and enhancement update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)\n\n* Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation (CVE-2026-24072)\n\n* httpd: mod_auth_digest: timing attack allows a bypass of digest authentication (CVE-2026-33006)\n\n* httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)\n\n* httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)\n\n* httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)\n\n* httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)\n\n* httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)\n\n* httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue (CVE-2026-42535)\n\n* httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)\n\n* httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)\n\n* httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951)\n\n* httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges (CVE-2026-44119)\n\nBug Fix(es) and Enhancement(s):\n\n* address Moderate severity issues from httpd 2.4.68 [rhel-9.8.z] (JIRA:Rocky Linux-184520)\n\n* mod_proxy_html regression in CVE-2026-34355 fix [rhel-9.8.z] (JIRA:Rocky Linux-192752)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-22T12:03:41.8445Z","modified":"2026-07-22T12:30:05.662789678Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:42828","title":"Important: httpd:2.4 security, bug fix, and enhancement update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)\n\n* httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)\n\n* httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)\n\n* httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)\n\n* httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)\n\n* httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)\n\n* httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)\n\n* httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)\n\n* httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951)\n\nBug Fix(es) and Enhancement(s):\n\n* mod_proxy_html regression in CVE-2026-34355 fix [rhel-8.10.z] (JIRA:Rocky Linux-192751)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-21T18:01:06.762101Z","modified":"2026-07-21T18:34:58.318955866Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-44631","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T16:16:00Z","modified":"2026-07-21T13:15:04.265520125Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:26.396868Z"},{"id":"ALSA-2026:34109","title":"Important: httpd security, bug fix, and enhancement update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  \n\nSecurity Fix(es):  \n\n  * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)\n  * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)\n  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)\n  * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)\n  * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)\n  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)\n  * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * address Moderate severity issues from httpd 2.4.68 [almalinux-10.2.z] (JIRA:AlmaLinux-184518)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-01T00:00:00Z","modified":"2026-10-29T11:42:21.117027778Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:41906","title":"Important: httpd security, bug fix, and enhancement update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  \n\nSecurity Fix(es):  \n\n  * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)\n  * Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation (CVE-2026-24072)\n  * httpd: mod_auth_digest: timing attack allows a bypass of digest authentication (CVE-2026-33006)\n  * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)\n  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)\n  * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)\n  * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)\n  * httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)\n  * httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue (CVE-2026-42535)\n  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)\n  * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)\n  * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951)\n  * httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges (CVE-2026-44119)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * address Moderate severity issues from httpd 2.4.68 [almalinux-9.8.z] (JIRA:AlmaLinux-184520)\n  * mod_proxy_html regression in CVE-2026-34355 fix [almalinux-9.8.z] (JIRA:AlmaLinux-192752)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-20T00:00:00Z","modified":"2026-10-29T11:32:35.998149206Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:42828","title":"Important: httpd:2.4 security, bug fix, and enhancement update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  \n\nSecurity Fix(es):  \n\n  * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)\n  * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)\n  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)\n  * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)\n  * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)\n  * httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)\n  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)\n  * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)\n  * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * mod_proxy_html regression in CVE-2026-34355 fix [almalinux-8.10.z] (JIRA:AlmaLinux-192751)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-21T00:00:00Z","modified":"2026-10-29T11:02:24.603096673Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-89735","title":"CVE-2026-44631 affecting package httpd for versions less than 2.4.68-1","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-08T16:16:40Z","modified":"2026-08-28T17:56:38.441885Z","updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"BIT-apache-2026-44631","title":"Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow","description":"Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue.","status":"published","published":"2026-06-10T08:39:21.148Z","modified":"2026-09-08T08:45:33.765237639Z","updated_at":"2026-11-02T15:28:28.267217Z"},{"id":"CLSA-2026-1782212784","title":"httpd: Fix of CVE-2026-44631","description":"- CVE-2026-44631: fix buffer underwrite in ap_regname() caused by signed char\n  regex capture-name offsets producing negative capture indices and corrupting\n  memory; cast the name-table offset bytes to unsigned char and reject\n  unreasonably large capture group numbers","status":"published","published":"2026-06-23T11:06:39Z","modified":"2026-10-26T09:30:22.331825634Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782293598","title":"Fix CVE(s): CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631","description":"   * SECURITY UPDATE: mod_proxy_ftp infinite loop in Retry-After parsing\n     - debian/patches/CVE-2026-44186.patch: advance secs_str in the\n       digit-scan loop in modules/proxy/mod_proxy_ftp.c.\n     - CVE-2026-44186\n   * SECURITY UPDATE: mod_ssl OCSP request corruption on short socket write\n     - debian/patches/CVE-2026-44185.patch: advance the write buffer by the\n       bytes actually sent (wlen) in modules/ssl/ssl_util_ocsp.c.\n     - CVE-2026-44185\n   * SECURITY UPDATE: ap_regname unbounded capture-group allocation (DoS)\n     - debian/patches/CVE-2026-44631.patch: read capture index bytes as\n       unsigned and reject captures \u003e 1024 in server/util_pcre.c, and treat\n       a negative ap_regname() return as an error in server/core.c and\n       modules/proxy/mod_proxy.c.\n     - CVE-2026-44631\n   * SECURITY UPDATE: ap_expr file functions exposable from .htaccess\n     - debian/patches/CVE-2026-44119.patch: restrict file functions/tests\n       centrally in ap_expr_parse_cmd_mi() via a new\n       AP_EXPR_FLAG_RESTRICTED_FILE_FUNC flag in include/ap_expr.h and\n       server/util_expr_eval.c, dropping the per-module restriction in\n       modules/mappers/mod_rewrite.c and modules/metadata/mod_setenvif.c.\n     - CVE-2026-44119","status":"published","published":"2026-06-24T09:33:40Z","modified":"2026-10-26T09:32:01.71408292Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782293864","title":"Fix CVE(s): CVE-2026-44631","description":"   * SECURITY UPDATE: buffer underwrite in ap_regname() via crafted regular\n     expressions in the configuration\n     - debian/patches/CVE-2026-44631.patch: cast the PCRE name-table capture\n       index bytes to unsigned char in ap_regname() in server/util_pcre.c so a\n       high bit no longer sign-extends the capture index to a negative value,\n       and reject capture group numbers above 1024 by returning an error that\n       the \u003cDirectory\u003e/\u003cLocation\u003e/\u003cFiles\u003e and \u003cProxy\u003e configuration handlers in\n       server/core.c and modules/proxy/mod_proxy.c now check, preventing a\n       buffer underwrite. Upstream fix\n       7d9f3cfb10b0fe70df7358d26d7b1f374ea1a0cb (SVN r1935015).\n     - CVE-2026-44631","status":"published","published":"2026-06-24T09:38:02Z","modified":"2026-10-26T09:32:05.337625459Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782978404","title":"httpd: Fix of 5 CVEs","description":"- CVE-2026-43951: fix mod_headers/mod_mime out-of-bounds read in merge_response_headers content-language iteration\n- CVE-2026-44119: fix improper privilege management allowing .htaccess authors to invoke file functions in restricted contexts\n- CVE-2026-44185: fix mod_ssl OCSP buffer over-read in ssl_util_ocsp send_request\n- CVE-2026-44186: fix mod_proxy_ftp infinite loop on crafted backend FTP response\n- CVE-2026-44631: fix ap_regname buffer underwrite via crafted named capture in configuration regex","status":"published","published":"2026-07-02T07:47:04Z","modified":"2026-10-26T09:31:45.013820489Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782980275","title":"httpd: Fix of 5 CVEs","description":"- CVE-2026-43951: fix mod_headers/mod_mime out-of-bounds read in merge_response_headers content-language iteration\n- CVE-2026-44119: fix improper privilege management allowing .htaccess authors to invoke file functions in restricted contexts\n- CVE-2026-44185: fix mod_ssl OCSP buffer over-read in ssl_util_ocsp send_request\n- CVE-2026-44186: fix mod_proxy_ftp infinite loop on crafted backend FTP response\n- CVE-2026-44631: fix ap_regname buffer underwrite via crafted named capture in configuration regex","status":"published","published":"2026-07-02T08:18:17Z","modified":"2026-10-26T09:31:37.715806596Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782980618","title":"httpd: Fix of 5 CVEs","description":"- CVE-2026-43951: fix http_filters out-of-bounds read in merge_response_headers\n  language iteration\n- CVE-2026-44119: restrict ap_expr per-directory file functions centrally\n- CVE-2026-44185: fix mod_ssl OCSP send_request buffer over-read\n- CVE-2026-44186: fix mod_proxy_ftp infinite loop in FTP response iteration\n- CVE-2026-44631: fix util_pcre ap_regname buffer underwrite via crafted regex\n  captures","status":"published","published":"2026-07-02T08:23:59Z","modified":"2026-10-26T09:31:49.732830668Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782987076","title":"Fix CVE(s): CVE-2026-44186, CVE-2026-44631","description":"   * SECURITY UPDATE: Buffer underwrite in ap_regname() on crafted regular\n     expressions in the configuration\n     - debian/patches/CVE-2026-44631.patch: cast the capture-index bytes to\n       unsigned char and reject capture group numbers greater than 1024 in\n       ap_regname() in server/util_pcre.c, so a crafted regex in a\n       \u003cDirectory~\u003e, \u003cLocation~\u003e, \u003cFiles~\u003e or \u003cProxy~\u003e section can no longer\n       produce a negative capture index and underwrite the names array; also\n       check the ap_regname() return value in dirsection(), urlsection() and\n       filesection() in server/core.c and proxysection() in\n       modules/proxy/mod_proxy.c. Upstream fix\n       7d9f3cfb10b0fe70df7358d26d7b1f374ea1a0cb (SVN r1935015).\n     - CVE-2026-44631","status":"published","published":"2026-07-02T10:11:35Z","modified":"2026-10-26T09:32:03.226243592Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783529026","title":"Fix CVE(s): CVE-2026-44631","description":"   * SECURITY UPDATE: buffer underwrite in ap_regname() regex capture handling\n     - debian/patches/CVE-2026-44631.patch: cast the PCRE name-table bytes to\n       unsigned char in ap_regname() so the capture group number cannot become\n       negative, and reject capture numbers above 1024, in server/util_pcre.c;\n       check the return value in the \u003cDirectory\u003e, \u003cLocation\u003e, \u003cFiles\u003e and\n       \u003cProxy\u003e section handlers in server/core.c and modules/proxy/mod_proxy.c\n     - CVE-2026-44631","status":"published","published":"2026-07-08T16:44:03Z","modified":"2026-10-26T09:31:52.317170052Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"MGASA-2026-0289","title":"Updated apache packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nApache HTTP Server: mod_ldap per-dir use-after-free. (CVE-2026-29167)\nApache HTTP Server: mod_proxy_ftp XSS. (CVE-2026-29170)\nApache HTTP Server: mod_proxy_html buffer overflow. (CVE-2026-34355)\nApache HTTP Server: ProxyPassReverseCookieMap buffer overflow.\n(CVE-2026-34356)\nApache HTTP Server: mod_dav_fs protected directory access.\n(CVE-2026-42535)\nApache HTTP Server: mod_xml2enc heap overflow. (CVE-2026-42536)\nApache HTTP Server: OOB Read in `merge_response_headers` can cause\ncrash. (CVE-2026-43951)\nApache HTTP Server: escalation of privilege through expressions in\n.htaccess in multiple modules. (CVE-2026-44119)\nApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP\n`send_request`. (CVE-2026-44185)\nApache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp.\n(CVE-2026-44186)\nApache HTTP Server: Heap Underflow in `ap_regname` via Signed Char\nOverflow. (CVE-2026-44631)\nApache HTTP Server: mod_http2 memory corruption when file handles\nexhausted. (CVE-2026-48913)\nApache HTTP Server: mod_http2 denial of service. (CVE-2026-49975)\n","status":"published","published":"2026-07-23T17:45:56Z","modified":"2026-07-23T18:00:05.384234202Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:21235-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n","status":"published","published":"2026-07-06T20:21:38Z","modified":"2026-07-09T10:00:10.892293892Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-44631","title":"CVE-2026-44631 in apache2 - Patched by Root","description":"Root has patched CVE-2026-44631 in the apache2 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-10-07T07:08:04Z","modified":"2026-10-09T13:00:13.223940856Z","updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-44631","title":"CVE-2026-44631 in apache2 - Patched by Root","description":"Root has patched CVE-2026-44631 in the apache2 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-10-07T07:08:40Z","modified":"2026-10-08T13:00:07.287284817Z","updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"SUSE-SU-2026:22564-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n","status":"published","published":"2026-07-06T20:21:36Z","modified":"2026-07-15T18:24:11.418188626Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2686-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n\nNon security issue:\n\n- Update to 2.4.66 (jsc#PED-16334).\n","status":"published","published":"2026-06-29T22:36:03Z","modified":"2026-07-01T09:45:04.712117752Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2717-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n","status":"published","published":"2026-07-01T08:05:04Z","modified":"2026-07-02T18:24:16.791005688Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2735-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n","status":"published","published":"2026-07-02T22:36:37Z","modified":"2026-07-04T08:30:07.670568079Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2759-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n","status":"published","published":"2026-07-06T02:04:24Z","modified":"2026-07-07T08:30:04.903936869Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8516-1","title":"apache2 vulnerabilities","description":"It was discovered that Apache HTTP Server's mod_ldap module incorrectly\nhandled memory when processing per-directory configurations. An attacker\ncould use this issue to cause the server to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. (CVE-2026-29167)\n\nIt was discovered that Apache HTTP Server's mod_proxy_ftp module\nincorrectly handled HTML generation for FTP directory listings. A remote\nattacker could possibly use this issue to inject arbitrary web script or\nHTML. (CVE-2026-29170)\n\nIt was discovered that Apache HTTP Server's mod_proxy_html module\nincorrectly handled certain content from an untrusted backend. A remote\nattacker could possibly use this issue to cause Apache HTTP Server to\ncrash, resulting in a denial of service. (CVE-2026-34355)\n\nIt was discovered that Apache HTTP Server incorrectly handled\nProxyPassReverseCookie directives with a malicious backend server. A remote\nattacker could possibly use this issue to cause Apache HTTP Server to\ncrash, resulting in a denial of service. (CVE-2026-34356)\n\nIt was discovered that Apache HTTP Server's mod_dav_fs module incorrectly\nhandled certain path operations. An authenticated user could possibly use\nthis issue to manipulate trusted WebDAV property databases or cause a\ndenial of service. (CVE-2026-42535)\n\nIt was discovered that Apache HTTP Server's mod_xml2enc module incorrectly\nhandled certain content from an untrusted backend. A remote attacker could\npossibly use this issue to cause Apache HTTP Server to crash, resulting in\na denial of service. (CVE-2026-42536)\n\nIt was discovered that Apache HTTP Server incorrectly handled response\nheaders when multiple content languages were configured. A remote attacker\ncould possibly use this issue to obtain sensitive information.\n(CVE-2026-43951)\n\nIt was discovered that Apache HTTP Server incorrectly restricted certain\nfile functions in expressions within .htaccess files. A local attacker with\n.htaccess write access could possibly use this issue to obtain sensitive\ninformation. (CVE-2026-44119)\n\nIt was discovered that Apache HTTP Server's mod_ssl module incorrectly\nhandled OCSP responses from an attacker-controlled server. A remote\nattacker could possibly use this issue to obtain sensitive information or\ncause a denial of service. (CVE-2026-44185)\n\nIt was discovered that Apache HTTP Server's mod_proxy_ftp module\nincorrectly handled responses from an attacker-controlled backend FTP\nserver. A remote attacker could possibly use this issue to cause Apache\nHTTP Server to stop responding, resulting in a denial of service.\n(CVE-2026-44186)\n\nIt was discovered that Apache HTTP Server incorrectly handled crafted\nregular expressions in the server configuration. An attacker could possibly\nuse this issue to execute arbitrary code or cause a denial of service.\n(CVE-2026-44631)\n\nIt was discovered that Apache HTTP Server's mod_http2 module had a\nuse-after-free vulnerability when file handles were exhausted. A remote\nattacker could possibly use this issue to cause Apache HTTP Server to\ncrash, resulting in a denial of service. (CVE-2026-48913)","status":"published","published":"2026-07-08T13:49:49Z","modified":"2026-07-08T22:49:38.324399826Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8571-1","title":"apache2 vulnerabilities","description":"Pavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server\nincorrectly handled certain memory operations in mod_authn_socache. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2026-33007)\n\nHaruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that Apache\nHTTP Server had an HTTP response splitting vulnerability in multiple\nmodules when used with untrusted or compromised backend servers. An\nattacker could possibly use this issue to inject arbitrary HTTP headers.\n(CVE-2026-33523)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could\npossibly use this issue to cause a denial of service. (CVE-2026-33857)\n\nTianshuo Han and Jérôme Djouder discovered that Apache HTTP Server\nincorrectly handled certain string operations in mod_proxy_ajp. A remote\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2026-34032)\n\nIt was discovered that Apache HTTP Server's mod_proxy_html module\nincorrectly handled certain content from an untrusted backend. A remote\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2026-34355)\n\nIt was discovered that Apache HTTP Server incorrectly handled\nProxyPassReverseCookie directives with a malicious backend server. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2026-34356)\n\nIt was discovered that Apache HTTP Server's mod_dav_fs module incorrectly\nhandled certain path operations. An authenticated user could possibly use\nthis issue to manipulate trusted WebDAV property databases or cause a\ndenial of service. (CVE-2026-42535)\n\nIt was discovered that Apache HTTP Server's mod_xml2enc module incorrectly\nhandled certain content from an untrusted backend. A remote attacker could\npossibly use this issue to cause a denial of service. (CVE-2026-42536)\n\nIt was discovered that Apache HTTP Server incorrectly handled response\nheaders when multiple content languages were configured. A remote\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2026-43951)\n\nIt was discovered that Apache HTTP Server incorrectly restricted certain\nfile functions in expressions within .htaccess files. A local attacker\nwith .htaccess write access could possibly use this issue to obtain\nsensitive information. (CVE-2026-44119)\n\nIt was discovered that Apache HTTP Server's mod_ssl module incorrectly\nhandled OCSP responses from an attacker-controlled server. A remote\nattacker could possibly use this issue to obtain sensitive information or\ncause a denial of service. (CVE-2026-44185)\n\nIt was discovered that Apache HTTP Server's mod_proxy_ftp module\nincorrectly handled responses from an attacker-controlled backend FTP\nserver. A remote attacker could possibly use this issue to cause a denial\nof service. (CVE-2026-44186)\n\nIt was discovered that Apache HTTP Server incorrectly handled crafted\nregular expressions in the server configuration. An attacker could\npossibly use this issue to execute arbitrary code or cause a denial of\nservice. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and\nUbuntu 20.04 LTS. (CVE-2026-44631)\n\nIt was discovered that Apache HTTP Server's mod_http2 module had a\nuse-after-free vulnerability when file handles were exhausted. A remote\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 20.04 LTS. (CVE-2026-48913)","status":"published","published":"2026-07-20T19:03:33Z","modified":"2026-07-21T13:20:12.928087549Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}