Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Oracle Linux 10 httpd Important Denial Of Service Issues ELSA-2026-21433

oracle
Calendar Grey July 20, 2026
Scroller Oracle
Oracle Linux 10 updates address several important issues including heap-based buffer overflows and denial of service.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

Summary

[2.4.63-13.0.1.el10_2.4] - Replace index.html with Oracle's index page oracle_index.html. [2.4.63-13.4] - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CV...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow httpd important Oracle

SRPMs

http://oss.oracle.com/ol10/SRPMS-updates/httpd-2.4.63-13.0.1.el10_2.4.src.rpm

x86_64

httpd-2.4.63-13.0.1.el10_2.4.x86_64.rpm httpd-core-2.4.63-13.0.1.el10_2.4.x86_64.rpm httpd-devel-2.4.63-13.0.1.el10_2.4.x86_64.rpm httpd-filesystem-2.4.63-13.0.1.el10_2.4.noarch.rpm httpd-manual-2.4.63-13.0.1.el10_2.4.noarch.rpm httpd-tools-2.4.63-13.0.1.el10_2.4.x86_64.rpm mod_ldap-2.4.63-13.0.1.el10_2.4.x86_64.rpm mod_lua-2.4.63-13.0.1.el10_2.4.x86_64.rpm mod_proxy_html-2.4.63-13.0.1.el10_2.4.x86_64.rpm mod_session-2.4.63-13.0.1.el10_2.4.x86_64.rpm mod_ssl-2.4.63-13.0.1.el10_2.4.x86_64.rpm

aarch64

httpd-2.4.63-13.0.1.el10_2.4.aarch64.rpm httpd-core-2.4.63-13.0.1.el10_2.4.aarch64.rpm httpd-devel-2.4.63-13.0.1.el10_2.4.aarch64.rpm httpd-filesystem-2.4.63-13.0.1.el10_2.4.noarch.rpm httpd-manual-2.4.63-13.0.1.el10_2.4.noarch.rpm httpd-tools-2.4.63-13.0.1.el10_2.4.aarch64.rpm mod_ldap-2.4.63-13.0.1.el10_2.4.aarch64.rpm mod_lua-2.4.63-13.0.1.el10_2.4.aarch64.rpm mod_proxy_html-2.4.63-13.0.1.el10_2.4.aarch64.rpm mod_session-2.4.63-13.0.1.el10_2.4.aarch64.rpm mod_ssl-2.4.63-13.0.1.el10_2.4.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-28780 CVE-2026-33007 CVE-2026-33857 CVE-2026-34032 CVE-2026-34059

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow httpd important Oracle

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.