Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

Fedora 43 httpd Critical Arbitrary Code Execution Buffer Overflow Alerts

fedora
Calendar Grey May 24, 2026
Dist Fedora Esm H88
A critical update for Fedora 43 httpd addresses new vulnerabilities and enhances security for users. Read more!
new version 2.4.67

Summary

The Apache HTTP Server is a powerful, efficient, and extensible

web server.

Update Information:

new version 2.4.67

Topics%20covered

Topics Covered

security advisory fedora buffer overflow arbitrary code execution httpd important

Change Log

* Wed May 6 2026 Lubo\u0161 Uhliarik - 2.4.67-1 - new version 2.4.67

References


[ 1 ] Bug #2464943 - httpd-2.4.67 is available https://bugzilla.redhat.com/show_bug.cgi?id=2464943 [ 2 ] Bug #2466956 - CVE-2026-28780 httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2466956 [ 3 ] Bug #2469229 - CVE-2026-34032 httpd: heap-based buffer over-read due to missing null-termination check [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2469229 [ 4 ] Bug #2469240 - CVE-2026-34059 httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2469240 [ 5 ] Bug #2469242 - CVE-2026-33007 httpd: NULL pointer dereference can cause a child process crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2469242 [ 6 ] Bug #2469243 - CVE-2026-33857 httpd: off-by-one out-of-bounds reads in AJP getter functions [fedora-all] https://bugz...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-0c87f546f8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: httpd
Product: Fedora 43
Version: 2.4.67
Release: 1.fc43
URL: https://httpd.apache.org/
Summary: Apache HTTP Server

Topics%20covered

Topics Covered

security advisory fedora buffer overflow arbitrary code execution httpd important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here