-
released this
2026-08-18 08:54:23 +00:00 | -722 commits to c8-stream-2.4 since this releasevia malicious backend servers (CVE-2026-34356)
Resolves: RHEL-186190 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
via untrusted content in mod_xml2enc (CVE-2026-42536)
Resolves: RHEL-186181 - httpd: Apache HTTP Server: Buffer overflow in
mod_proxy_html allows security bypass (CVE-2026-34355)
Resolves: RHEL-186160 - httpd: Apache HTTP Server: Buffer Over-read via
outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
Resolves: RHEL-184308 - httpd: Apache HTTP Server: Denial of Service via
crafted regular expressions (CVE-2026-44631)
Resolves : RHEL-182579 - httpd: incomplete fix for
CVE-2023-38709 (CVE-2024-42516)
Resolves: RHEL-175622 - httpd: NULL pointer dereference via specially crafted
request (CVE-2026-29169)
Resolves: RHEL-193112 - httpd: Apache HTTP Server: Denial of Service in
mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)
Resolves: RHEL-234657 - httpd: Apache HTTP Server: Privilege Escalation via
.htaccess file manipulation (CVE-2026-24072)
Resolves: RHEL-191241 - httpd: Apache HTTP Server: Out-of-bounds Read in
mod_headers and mod_mime (CVE-2026-43951)
Also addresses CVE-2026-44119, CVE-2026-42535, CVE-2026-33006Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
Source code (ZIP)