{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apache Software Foundation heeft meerdere kwetsbaarheden verholpen in Apache HTTP Server.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden betreffen verschillende modules en functionaliteiten binnen Apache HTTP Server. De meest ernstige kwetsbaarheid betreft een double free in de HTTP/2-implementatie, die het voor een aanvaller mogelijk maakt om willekeurige code uit te voeren voorafgaand aan authenticatie. \n\nLokale .htaccess auteurs kunnen via een privilege-escalatie toegang krijgen tot bestanden met httpd-gebruikersrechten. Het mod_proxy_ajp module bevat een heap-based buffer overflow en een out-of-bounds read, waardoor geheugenbeschadiging kan optreden. In de mod_md module is een resource allocatieprobleem aanwezig dat de serverprestaties kan be\u00efnvloeden. De mod_dav_lock module bevat een NULL pointer dereference die kan leiden tot servercrashes en daarmee denial of service. De mod_auth_digest module kent een timing attack die Digest authenticatie kan omzeilen. De mod_authn_socache module heeft een NULL pointer dereference die crashes veroorzaakt bij caching forward proxy configuraties. Verder is er een HTTP response splitting kwetsbaarheid die manipulatie van HTTP headers mogelijk maakt. Daarnaast is er een improper null termination en out-of-bounds read in de core server functionaliteit, en een buffer over-read die kan leiden tot informatielekken of instabiliteit.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apache Software Foundation heeft versie 2.4.67 uitgebracht waarin alle genoemde kwetsbaarheden zijn verholpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Improper Null Termination",
        "title": "CWE-170"
      },
      {
        "category": "general",
        "text": "Observable Timing Discrepancy",
        "title": "CWE-208"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Double Free",
        "title": "CWE-415"
      },
      {
        "category": "general",
        "text": "DEPRECATED: HTTP response splitting",
        "title": "CWE-443"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Multiple Releases of Same Resource or Handle",
        "title": "CWE-1341"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apache HTTP Server",
    "tracking": {
      "current_release_date": "2026-05-06T11:33:26.390004Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0134",
      "initial_release_date": "2026-05-06T11:33:26.390004Z",
      "revision_history": [
        {
          "date": "2026-05-06T11:33:26.390004Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Apache HTTP Server"
          }
        ],
        "category": "vendor",
        "name": "Apache Software Foundation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-23918",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        },
        {
          "category": "other",
          "text": "Multiple Releases of Same Resource or Handle",
          "title": "CWE-1341"
        },
        {
          "category": "description",
          "text": "Apache HTTP Server 2.4.66 contains a critical double free vulnerability in its HTTP/2 implementation that enables remote code execution, fixed in version 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-23918 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-23918.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-23918"
    },
    {
      "cve": "CVE-2026-24072",
      "notes": [
        {
          "category": "description",
          "text": "An escalation of privilege vulnerability in Apache HTTP Server versions 2.4.66 and earlier allows local .htaccess authors to access files with httpd user privileges, resolved in version 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-24072 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-24072.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-24072"
    },
    {
      "cve": "CVE-2026-28780",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap-based buffer overflow in Apache HTTP Server mod_proxy_ajp module allows a malicious AJP server to corrupt memory by writing beyond the buffer, affecting versions up to 2.4.66 and fixed in 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28780 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28780.json"
        }
      ],
      "title": "CVE-2026-28780"
    },
    {
      "cve": "CVE-2026-29168",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "description",
          "text": "Apache HTTP Server versions 2.4.30 through 2.4.66 contain a resource allocation vulnerability in the mod_md module related to OCSP response data, resolved in version 2.4.67.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-29168 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-29168.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-29168"
    },
    {
      "cve": "CVE-2026-29169",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "A NULL pointer dereference vulnerability in mod_dav_lock of Apache HTTP Server 2.4.66 and earlier can cause server crashes, affecting versions up to 2.4.66.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-29169 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-29169.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-29169"
    },
    {
      "cve": "CVE-2026-33006",
      "cwe": {
        "id": "CWE-208",
        "name": "Observable Timing Discrepancy"
      },
      "notes": [
        {
          "category": "other",
          "text": "Observable Timing Discrepancy",
          "title": "CWE-208"
        },
        {
          "category": "description",
          "text": "A timing attack vulnerability in Apache HTTP Server 2.4.66\u0027s mod_auth_digest module allows remote attackers to bypass Digest authentication, fixed in version 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33006 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33006.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-33006"
    },
    {
      "cve": "CVE-2026-33007",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "A NULL pointer dereference vulnerability in mod_authn_socache of Apache HTTP Server 2.4.66 and earlier allows unauthenticated remote users to crash child processes in caching forward proxy setups, fixed in version 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33007 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33007.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-33007"
    },
    {
      "cve": "CVE-2026-33523",
      "notes": [
        {
          "category": "description",
          "text": "An HTTP response splitting vulnerability exists in multiple Apache HTTP Server modules up to version 2.4.66, which is resolved in version 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33523 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33523.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-33523"
    },
    {
      "cve": "CVE-2026-33857",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability exists in the mod_proxy_ajp module of Apache HTTP Server versions up to 2.4.66, resolved in version 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33857 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33857.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-33857"
    },
    {
      "cve": "CVE-2026-34032",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Improper Null Termination",
          "title": "CWE-170"
        },
        {
          "category": "description",
          "text": "Apache HTTP Server versions up to 2.4.66 contain an Improper Null Termination and Out-of-bounds Read vulnerability, which is addressed in version 2.4.67.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-34032 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34032.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-34032"
    },
    {
      "cve": "CVE-2026-34059",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A buffer over-read vulnerability in Apache HTTP Server versions up to 2.4.66 has been addressed in version 2.4.67, requiring users to upgrade to resolve the issue.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-34059 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34059.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-34059"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "apache2-2.4.67-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the apache2-2.4.67-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10785",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10785-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23918 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24072 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24072/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-28780 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-28780/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29168 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29169 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29169/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33006 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33006/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33007 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33007/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33523 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33523/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33857 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33857/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34032 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34032/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34059 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34059/"
      }
    ],
    "title": "apache2-2.4.67-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-05-16T00:00:00Z",
      "generator": {
        "date": "2026-05-16T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10785-1",
      "initial_release_date": "2026-05-16T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-05-16T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.aarch64",
                "product": {
                  "name": "apache2-2.4.67-1.1.aarch64",
                  "product_id": "apache2-2.4.67-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.ppc64le",
                "product": {
                  "name": "apache2-2.4.67-1.1.ppc64le",
                  "product_id": "apache2-2.4.67-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.s390x",
                "product": {
                  "name": "apache2-2.4.67-1.1.s390x",
                  "product_id": "apache2-2.4.67-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.67-1.1.x86_64",
                "product": {
                  "name": "apache2-2.4.67-1.1.x86_64",
                  "product_id": "apache2-2.4.67-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64"
        },
        "product_reference": "apache2-2.4.67-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le"
        },
        "product_reference": "apache2-2.4.67-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x"
        },
        "product_reference": "apache2-2.4.67-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.67-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        },
        "product_reference": "apache2-2.4.67-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-23918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23918",
          "url": "https://www.suse.com/security/cve/CVE-2026-23918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263957 for CVE-2026-23918",
          "url": "https://bugzilla.suse.com/1263957"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23918"
    },
    {
      "cve": "CVE-2026-24072",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24072"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24072",
          "url": "https://www.suse.com/security/cve/CVE-2026-24072"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263935 for CVE-2026-24072",
          "url": "https://bugzilla.suse.com/1263935"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-24072"
    },
    {
      "cve": "CVE-2026-28780",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-28780"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.\nIf mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-28780",
          "url": "https://www.suse.com/security/cve/CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264163 for CVE-2026-28780",
          "url": "https://bugzilla.suse.com/1264163"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-28780"
    },
    {
      "cve": "CVE-2026-29168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server\u0027s   mod_md via OCSP response data.\n\nThis issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29168",
          "url": "https://www.suse.com/security/cve/CVE-2026-29168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264150 for CVE-2026-29168",
          "url": "https://bugzilla.suse.com/1264150"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-29168"
    },
    {
      "cve": "CVE-2026-29169",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29169"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.\n\nThe only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29169",
          "url": "https://www.suse.com/security/cve/CVE-2026-29169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263956 for CVE-2026-29169",
          "url": "https://bugzilla.suse.com/1263956"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-29169"
    },
    {
      "cve": "CVE-2026-33006",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33006"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33006",
          "url": "https://www.suse.com/security/cve/CVE-2026-33006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263955 for CVE-2026-33006",
          "url": "https://bugzilla.suse.com/1263955"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33006"
    },
    {
      "cve": "CVE-2026-33007",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33007"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33007",
          "url": "https://www.suse.com/security/cve/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263954 for CVE-2026-33007",
          "url": "https://bugzilla.suse.com/1263954"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33007"
    },
    {
      "cve": "CVE-2026-33523",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33523"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.\n\nThis issue affects Apache HTTP Server: from through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33523",
          "url": "https://www.suse.com/security/cve/CVE-2026-33523"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263953 for CVE-2026-33523",
          "url": "https://bugzilla.suse.com/1263953"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33523"
    },
    {
      "cve": "CVE-2026-33857",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33857"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out-of-bounds Read vulnerability in mod_proxy_ajp of \n\nApache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33857",
          "url": "https://www.suse.com/security/cve/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263952 for CVE-2026-33857",
          "url": "https://bugzilla.suse.com/1263952"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33857"
    },
    {
      "cve": "CVE-2026-34032",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34032"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34032",
          "url": "https://www.suse.com/security/cve/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263951 for CVE-2026-34032",
          "url": "https://bugzilla.suse.com/1263951"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34032"
    },
    {
      "cve": "CVE-2026-34059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer Over-read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
          "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34059",
          "url": "https://www.suse.com/security/cve/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263950 for CVE-2026-34059",
          "url": "https://bugzilla.suse.com/1263950"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.aarch64",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.ppc64le",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.s390x",
            "openSUSE Tumbleweed:apache2-2.4.67-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-16T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34059"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nhttpd:\n  * httpd-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * httpd-core-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * httpd-devel-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * httpd-filesystem-2.4.67-0.1.hum1 (noarch)\n  * httpd-manual-2.4.67-0.1.hum1 (noarch)\n  * httpd-tools-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * mod_ldap-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * mod_lua-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * mod_proxy_html-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * mod_session-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * mod_ssl-2.4.67-0.1.hum1 (aarch64, x86_64)\n  * httpd-2.4.67-0.1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:13938",
        "url": "https://access.redhat.com/errata/RHSA-2026:13938"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-23918",
        "url": "https://access.redhat.com/security/cve/CVE-2026-23918"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-24072",
        "url": "https://access.redhat.com/security/cve/CVE-2026-24072"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34032",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34032"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33007",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33007"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34059",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34059"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33857",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33857"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13938.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-06-22T15:19:06+00:00",
      "generator": {
        "date": "2026-06-22T15:19:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.0.0"
        }
      },
      "id": "RHSA-2026:13938",
      "initial_release_date": "2026-05-06T08:55:25+00:00",
      "revision_history": [
        {
          "date": "2026-05-06T08:55:25+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-11T11:36:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-22T15:19:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-main@aarch64",
                "product": {
                  "name": "httpd-main@aarch64",
                  "product_id": "httpd-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.67-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-main@src",
                "product": {
                  "name": "httpd-main@src",
                  "product_id": "httpd-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.67-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-main@x86_64",
                "product": {
                  "name": "httpd-main@x86_64",
                  "product_id": "httpd-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.67-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-main@noarch",
                "product": {
                  "name": "httpd-main@noarch",
                  "product_id": "httpd-main@noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.67-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:httpd-main@aarch64"
        },
        "product_reference": "httpd-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-main@noarch as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:httpd-main@noarch"
        },
        "product_reference": "httpd-main@noarch",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:httpd-main@src"
        },
        "product_reference": "httpd-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:httpd-main@x86_64"
        },
        "product_reference": "httpd-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-23918",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-04T15:01:41.066212+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2465304"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache HTTP Server. This vulnerability, related to a double free error within the HTTP/2 protocol implementation, could potentially allow a remote attacker to execute arbitrary code. Successful exploitation could lead to a complete compromise of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue marked as Important rather than Moderate because it involves a memory safety violation (double free) in the HTTP/2 request handling path, which is directly exposed to untrusted network input. A double free condition can corrupt the heap allocator\u2019s internal metadata, enabling attackers to manipulate memory layout and potentially achieve arbitrary code execution (RCE) under favorable conditions. In this case, the flaw is triggered during an early stream reset in HTTP/2, meaning it can be exercised pre-authentication by a remote client without requiring complex application-level interaction. Given that Apache HTTP Server is widely deployed in internet-facing environments, even a low-probability RCE path significantly elevates risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:httpd-main@aarch64",
          "Red Hat Hardened Images:httpd-main@noarch",
          "Red Hat Hardened Images:httpd-main@src",
          "Red Hat Hardened Images:httpd-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-23918"
        },
        {
          "category": "external",
          "summary": "RHBZ#2465304",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465304"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-23918",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-23918"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23918",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23918"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T14:44:28.513000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-06T08:55:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13938"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable the `mod_http2` module in your Apache HTTP Server configuration. This can be achieved by commenting out or removing the `LoadModule http2_module modules/mod_http2.so` line in the Apache configuration file (e.g., `/etc/httpd/conf.modules.d/00-base.conf` or a similar configuration file). After modifying the configuration, restart the httpd service for the changes to take effect. This action will impact services relying on HTTP/2 functionality.",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol"
    },
    {
      "cve": "CVE-2026-24072",
      "cwe": {
        "id": "CWE-73",
        "name": "External Control of File Name or Path"
      },
      "discovery_date": "2026-05-04T13:01:13.896013+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464941"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache HTTP Server. This escalation of privilege vulnerability allows local attackers, specifically those with the ability to author .htaccess files, to read sensitive files. This flaw enables unauthorized access to files with the privileges of the httpd user, potentially leading to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:httpd-main@aarch64",
          "Red Hat Hardened Images:httpd-main@noarch",
          "Red Hat Hardened Images:httpd-main@src",
          "Red Hat Hardened Images:httpd-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-24072"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464941",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464941"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-24072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-24072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24072"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T12:37:57.673000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-06T08:55:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13938"
        },
        {
          "category": "workaround",
          "details": "To prevent local users from exploiting this flaw via .htaccess file manipulation, configure Apache HTTP Server to disable .htaccess overrides. Set `AllowOverride None` within the main server configuration or relevant `\u003cDirectory\u003e` blocks. This restricts the ability of local users to alter server settings. After applying this change, the `httpd` service must be reloaded or restarted for the new configuration to take effect.\n\nExample configuration:\n```\n\u003cDirectory \"/var/www/html\"\u003e\n    AllowOverride None\n\u003c/Directory\u003e\n```\nTo apply changes, reload the service:\n`sudo systemctl reload httpd`\nOr restart the service:\n`sudo systemctl restart httpd`",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation"
    },
    {
      "cve": "CVE-2026-33007",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-04T15:01:24.989510+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2465299"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_authn_socache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue allows an unauthenticated remote attacker to cause a crash in a child process. However, the main parent process remains active and functional. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_authn_socache loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:httpd-main@aarch64",
          "Red Hat Hardened Images:httpd-main@noarch",
          "Red Hat Hardened Images:httpd-main@src",
          "Red Hat Hardened Images:httpd-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "RHBZ#2465299",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465299"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33007",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33007",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T14:41:27.520000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-06T08:55:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13938"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_authn_socache and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash"
    },
    {
      "cve": "CVE-2026-33857",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-05-04T14:01:10.810459+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464953"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:httpd-main@aarch64",
          "Red Hat Hardened Images:httpd-main@noarch",
          "Red Hat Hardened Images:httpd-main@src",
          "Red Hat Hardened Images:httpd-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464953",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464953"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33857",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33857",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T13:07:30.753000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-06T08:55:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13938"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions"
    },
    {
      "cve": "CVE-2026-34032",
      "cwe": {
        "id": "CWE-170",
        "name": "Improper Null Termination"
      },
      "discovery_date": "2026-05-04T14:01:07.000400+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464952"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially leads to memory disclosure and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:httpd-main@aarch64",
          "Red Hat Hardened Images:httpd-main@noarch",
          "Red Hat Hardened Images:httpd-main@src",
          "Red Hat Hardened Images:httpd-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464952",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464952"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34032",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34032",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T12:54:54.383000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-06T08:55:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13938"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check"
    },
    {
      "cve": "CVE-2026-34059",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "discovery_date": "2026-05-04T13:01:08.557596+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464940"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the ajp_parse_data function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially leads to memory disclosure and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:httpd-main@aarch64",
          "Red Hat Hardened Images:httpd-main@noarch",
          "Red Hat Hardened Images:httpd-main@src",
          "Red Hat Hardened Images:httpd-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464940",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464940"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34059",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34059",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T12:39:42.273000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-06T08:55:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13938"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:httpd-main@aarch64",
            "Red Hat Hardened Images:httpd-main@noarch",
            "Red Hat Hardened Images:httpd-main@src",
            "Red Hat Hardened Images:httpd-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for httpd is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059)\n\n* httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032)\n\n* httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)\n\n* httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007)\n\n* Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:21391",
        "url": "https://access.redhat.com/errata/RHSA-2026:21391"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2464940",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464940"
      },
      {
        "category": "external",
        "summary": "2464952",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464952"
      },
      {
        "category": "external",
        "summary": "2464953",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464953"
      },
      {
        "category": "external",
        "summary": "2465299",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465299"
      },
      {
        "category": "external",
        "summary": "2466913",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466913"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21391.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd security update",
    "tracking": {
      "current_release_date": "2026-06-22T19:26:48+00:00",
      "generator": {
        "date": "2026-06-22T19:26:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.0.0"
        }
      },
      "id": "RHSA-2026:21391",
      "initial_release_date": "2026-05-27T21:13:26+00:00",
      "revision_history": [
        {
          "date": "2026-05-27T21:13:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-27T21:13:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-22T19:26:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-13.el9_8.1.src",
                "product": {
                  "name": "httpd-0:2.4.62-13.el9_8.1.src",
                  "product_id": "httpd-0:2.4.62-13.el9_8.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-13.el9_8.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-core-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-core-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_lua-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_lua-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-13.el9_8.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_session-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_session-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-13.el9_8.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-13.el9_8.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-13.el9_8.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-13.el9_8.1?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-13.el9_8.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_session-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_session-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-13.el9_8.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-13.el9_8.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-core-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-core-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_lua-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_lua-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-13.el9_8.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_session-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_session-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-13.el9_8.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-13.el9_8.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-13.el9_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-13.el9_8.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-core-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-core-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-devel-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-devel-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-tools-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-tools-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_ldap-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_ldap-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_lua-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_lua-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-13.el9_8.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_session-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_session-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_ssl-1:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_ssl-1:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-13.el9_8.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-13.el9_8.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-13.el9_8.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-13.el9_8.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
                "product": {
                  "name": "httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
                  "product_id": "httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.62-13.el9_8.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.62-13.el9_8.1.noarch",
                "product": {
                  "name": "httpd-manual-0:2.4.62-13.el9_8.1.noarch",
                  "product_id": "httpd-manual-0:2.4.62-13.el9_8.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-manual@2.4.62-13.el9_8.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-13.el9_8.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src"
        },
        "product_reference": "httpd-0:2.4.62-13.el9_8.1.src",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-core-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-core-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-core-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-devel-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.62-13.el9_8.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch"
        },
        "product_reference": "httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.62-13.el9_8.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch"
        },
        "product_reference": "httpd-manual-0:2.4.62-13.el9_8.1.noarch",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-tools-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_ldap-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_lua-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_lua-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_lua-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_session-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_session-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_session-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_session-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_ssl-1:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-28780",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-05-05T22:01:12.666022+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466913"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in mod_proxy_ajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP (Apache JServ Protocol) server, to send a specially crafted message. This message can cause mod_proxy_ajp to write attacker-controlled data beyond a heap-based buffer, potentially leading to arbitrary code execution or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466913",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466913"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-28780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-05T21:29:41.527000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-27T21:13:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21391"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow"
    },
    {
      "cve": "CVE-2026-33007",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-04T15:01:24.989510+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2465299"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_authn_socache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue allows an unauthenticated remote attacker to cause a crash in a child process. However, the main parent process remains active and functional. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_authn_socache loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "RHBZ#2465299",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465299"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33007",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33007",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T14:41:27.520000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-27T21:13:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21391"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_authn_socache and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash"
    },
    {
      "cve": "CVE-2026-33857",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-05-04T14:01:10.810459+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464953"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464953",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464953"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33857",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33857",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T13:07:30.753000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-27T21:13:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21391"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions"
    },
    {
      "cve": "CVE-2026-34032",
      "cwe": {
        "id": "CWE-170",
        "name": "Improper Null Termination"
      },
      "discovery_date": "2026-05-04T14:01:07.000400+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464952"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially leads to memory disclosure and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464952",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464952"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34032",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34032",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T12:54:54.383000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-27T21:13:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21391"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check"
    },
    {
      "cve": "CVE-2026-34059",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "discovery_date": "2026-05-04T13:01:08.557596+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464940"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the ajp_parse_data function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially leads to memory disclosure and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464940",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464940"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34059",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34059",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T12:39:42.273000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-27T21:13:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21391"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.src",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-core-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-devel-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-manual-0:2.4.62-13.el9_8.1.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_lua-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-1:2.4.62-13.el9_8.1.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.62-13.el9_8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()"
    }
  ]
}