# CVE-2026-73636: Apache HTTP Server: mod_auth_digest one-time-nonce replay attack CVE-2026-73636 is fixed in 36 products on 1 platform, first by apache2 2.4.66-2ubuntu2.6, released October 1, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-73636 - Priority: High - CVSS: 8.1 (Important) - EPSS: 0.0040 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 1, 2026 - Weakness: Authentication Bypass by Capture-replay - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73636 ## Description The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi (CVE-2026-63718) * httpd: httpd: Denial of Service via integer overflow in mod_dav_fs (CVE-2026-93546) * httpd: httpd: Authentication state corruption via concurrent Digest authentication requests (CVE-2026-73637) * httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response (CVE-2026-63045) * httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) * httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference (CVE-2026-46729) * httpd: httpd: Authentication bypass via credential replay in mod_auth_digest (CVE-2026-73636) * httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc (CVE-2026-63686) * httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest (CVE-2026-48005) * httpd: httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) * httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite (CVE-2026-56153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | apache2 Debian 13.5 (trixie) | 2.4.69-1~deb13u1 | [DEBIAN-CVE-2026-73636](https://patchblox.com/security/data/fix/linux/debian-cve-2026-73636.md) | Oct 5, 2026 | | Linux | apache2 Debian 14 | 2.4.69-1 | [DEBIAN-CVE-2026-73636](https://patchblox.com/security/data/fix/linux/debian-cve-2026-73636.md) | Oct 5, 2026 | | Linux | apache2 Ubuntu 18.04.6 LTS (bionic) | 2.4.29-1ubuntu4.27+esm13 | [apache2 2.4.29-1ubuntu4.27+esm13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-apache2-2.4.29-1ubuntu4.27-esm13.md) | Oct 19, 2026 | | Linux | apache2 Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [apache2 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-apache2-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | apache2 Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [apache2 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-apache2-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | apache2 Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [apache2 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-apache2-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | apache2 Ubuntu 26.04.1 LTS (resolute) | 2.4.66-2ubuntu2.6 | [apache2 2.4.66-2ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-apache2-2.4.66-2ubuntu2.6.md) | Oct 1, 2026 | | Linux | apache2 sles 15.6 | 2.4.66-150600.5.58.1 | [SUSE-SU-2026:5075-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5075-1.md) | Nov 7, 2026 | | Linux | apache2 sles 15.7 | 2.4.66-150700.4.26.1 | [SUSE-SU-2026:5077-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5077-1.md) | Nov 7, 2026 | | Linux | apache2-bin Ubuntu 18.04.6 LTS (bionic) | 2.4.29-1ubuntu4.27+esm13 | [apache2-bin 2.4.29-1ubuntu4.27+esm13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-apache2-bin-2.4.29-1ubuntu4.27-esm13.md) | Oct 19, 2026 | | Linux | apache2-bin Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [apache2-bin 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-apache2-bin-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | apache2-bin Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [apache2-bin 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-apache2-bin-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | apache2-bin Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [apache2-bin 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-apache2-bin-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | apache2-bin Ubuntu 26.04.1 LTS (resolute) | 2.4.66-2ubuntu2.6 | [apache2-bin 2.4.66-2ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-apache2-bin-2.4.66-2ubuntu2.6.md) | Oct 1, 2026 | | Linux | apache2-data Ubuntu 18.04.6 LTS (bionic) | 2.4.29-1ubuntu4.27+esm13 | [apache2-data 2.4.29-1ubuntu4.27+esm13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-apache2-data-2.4.29-1ubuntu4.27-esm13.md) | Oct 19, 2026 | | Linux | apache2-data Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [apache2-data 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-apache2-data-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | apache2-data Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [apache2-data 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-apache2-data-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | apache2-data Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [apache2-data 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-apache2-data-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | apache2-data Ubuntu 26.04.1 LTS (resolute) | 2.4.66-2ubuntu2.6 | [apache2-data 2.4.66-2ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-apache2-data-2.4.66-2ubuntu2.6.md) | Oct 1, 2026 | | Linux | apache2-devel sles 15.6 | 2.4.66-150600.5.58.1 | [SUSE-SU-2026:5075-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5075-1.md) | Nov 7, 2026 | | Linux | apache2-devel sles 15.7 | 2.4.66-150700.4.26.1 | [SUSE-SU-2026:5077-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5077-1.md) | Nov 7, 2026 | | Linux | apache2-event sles 15.7 | 2.4.66-150700.4.26.1 | [SUSE-SU-2026:5077-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5077-1.md) | Nov 7, 2026 | | Linux | apache2-manual sles 15.6 | 2.4.66-150600.5.58.1 | [SUSE-SU-2026:5075-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5075-1.md) | Nov 7, 2026 | | Linux | apache2-manual sles 15.7 | 2.4.66-150700.4.26.1 | [SUSE-SU-2026:5077-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5077-1.md) | Nov 7, 2026 | | Linux | apache2-prefork sles 15.6 | 2.4.66-150600.5.58.1 | [SUSE-SU-2026:5075-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5075-1.md) | Nov 7, 2026 | | Linux | apache2-prefork sles 15.7 | 2.4.66-150700.4.26.1 | [SUSE-SU-2026:5077-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5077-1.md) | Nov 7, 2026 | | Linux | apache2-suexec-custom Ubuntu 18.04.6 LTS (bionic) | 2.4.29-1ubuntu4.27+esm13 | [apache2-suexec-custom 2.4.29-1ubuntu4.27+esm13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-apache2-suexec-custom-2.4.29-1ubuntu4.27-esm13.md) | Oct 19, 2026 | | Linux | apache2-suexec-custom Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [apache2-suexec-custom 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-apache2-suexec-custom-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | apache2-suexec-custom Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [apache2-suexec-custom 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-apache2-suexec-custom-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | apache2-suexec-custom Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [apache2-suexec-custom 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-apache2-suexec-custom-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | apache2-suexec-custom Ubuntu 26.04.1 LTS (resolute) | 2.4.66-2ubuntu2.6 | [apache2-suexec-custom 2.4.66-2ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-apache2-suexec-custom-2.4.66-2ubuntu2.6.md) | Oct 1, 2026 | | Linux | apache2-suexec-pristine Ubuntu 18.04.6 LTS (bionic) | 2.4.29-1ubuntu4.27+esm13 | [apache2-suexec-pristine 2.4.29-1ubuntu4.27+esm13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-apache2-suexec-pristine-2.4.29-1ubuntu4.27-esm13.md) | Oct 19, 2026 | | Linux | apache2-suexec-pristine Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [apache2-suexec-pristine 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-apache2-suexec-pristine-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | apache2-suexec-pristine Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [apache2-suexec-pristine 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-apache2-suexec-pristine-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | apache2-suexec-pristine Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [apache2-suexec-pristine 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-apache2-suexec-pristine-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | apache2-suexec-pristine Ubuntu 26.04.1 LTS (resolute) | 2.4.66-2ubuntu2.6 | [apache2-suexec-pristine 2.4.66-2ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-apache2-suexec-pristine-2.4.66-2ubuntu2.6.md) | Oct 1, 2026 | | Linux | apache2-utils Ubuntu 18.04.6 LTS (bionic) | 2.4.29-1ubuntu4.27+esm13 | [apache2-utils 2.4.29-1ubuntu4.27+esm13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-apache2-utils-2.4.29-1ubuntu4.27-esm13.md) | Oct 19, 2026 | | Linux | apache2-utils Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [apache2-utils 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-apache2-utils-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | apache2-utils Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [apache2-utils 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-apache2-utils-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | apache2-utils Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [apache2-utils 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-apache2-utils-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | apache2-utils Ubuntu 26.04.1 LTS (resolute) | 2.4.66-2ubuntu2.6 | [apache2-utils 2.4.66-2ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-apache2-utils-2.4.66-2ubuntu2.6.md) | Oct 1, 2026 | | Linux | apache2-utils sles 15.6 | 2.4.66-150600.5.58.1 | [SUSE-SU-2026:5075-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5075-1.md) | Nov 7, 2026 | | Linux | apache2-utils sles 15.7 | 2.4.66-150700.4.26.1 | [SUSE-SU-2026:5077-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5077-1.md) | Nov 7, 2026 | | Linux | apache2-worker sles 15.6 | 2.4.66-150600.5.58.1 | [SUSE-SU-2026:5075-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5075-1.md) | Nov 7, 2026 | | Linux | apache2-worker sles 15.7 | 2.4.66-150700.4.26.1 | [SUSE-SU-2026:5077-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-5077-1.md) | Nov 7, 2026 | | Linux | httpd RHEL 10 | 2.4.63-13.el10_2.8 | [RHSA-2026:89860](https://patchblox.com/security/data/fix/linux/rhsa-2026-89860.md) | Oct 27, 2026 | | Linux | httpd RHEL 8 | 0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | httpd RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | httpd almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd almalinux 8 | 2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd ol 8 | 0:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd rocky 10 | 0:2.4.63-13.el10_2.8 | [RLSA-2026:89860](https://patchblox.com/security/data/fix/linux/rlsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd rocky 8 | 0:2.4.37-65.module+el8.10.0+40197+0231e209.8 | [RLSA-2026:92616](https://patchblox.com/security/data/fix/linux/rlsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd rocky 9 | 0:2.4.62-13.el9_8.9 | [RLSA-2026:88229](https://patchblox.com/security/data/fix/linux/rlsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-core RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | httpd-core almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-core almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-core amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-core ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-core ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-core-debuginfo amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-debuginfo amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-debugsource amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-devel RHEL 8 | 0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | httpd-devel RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | httpd-devel almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-devel almalinux 8 | 2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-devel almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-devel amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-devel ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-devel ol 8 | 0:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-devel ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-filesystem RHEL 8 | 0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | httpd-filesystem RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | httpd-filesystem almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-filesystem almalinux 8 | 2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-filesystem almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-filesystem amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-filesystem ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-filesystem ol 8 | 0:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-filesystem ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-manual RHEL 8 | 0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | httpd-manual RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | httpd-manual almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-manual almalinux 8 | 2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-manual almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-manual amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-manual ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-manual ol 8 | 0:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-manual ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-tools RHEL 8 | 0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | httpd-tools RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | httpd-tools almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-tools almalinux 8 | 2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-tools almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-tools amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | httpd-tools ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | httpd-tools ol 8 | 0:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | httpd-tools ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | httpd-tools-debuginfo amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | libapache2-mod-md Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [libapache2-mod-md 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libapache2-mod-md-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | libapache2-mod-md Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [libapache2-mod-md 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libapache2-mod-md-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | libapache2-mod-md Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [libapache2-mod-md 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libapache2-mod-md-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | libapache2-mod-proxy-uwsgi Ubuntu 20.04 LTS (focal) | 2.4.41-4ubuntu3.23+esm9 | [libapache2-mod-proxy-uwsgi 2.4.41-4ubuntu3.23+esm9](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libapache2-mod-proxy-uwsgi-2.4.41-4ubuntu3.23-esm9.md) | Oct 19, 2026 | | Linux | libapache2-mod-proxy-uwsgi Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu4.25 | [libapache2-mod-proxy-uwsgi 2.4.52-1ubuntu4.25](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libapache2-mod-proxy-uwsgi-2.4.52-1ubuntu4.25.md) | Oct 19, 2026 | | Linux | libapache2-mod-proxy-uwsgi Ubuntu 24.04.5 LTS (noble) | 2.4.58-1ubuntu8.17 | [libapache2-mod-proxy-uwsgi 2.4.58-1ubuntu8.17](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libapache2-mod-proxy-uwsgi-2.4.58-1ubuntu8.17.md) | Oct 19, 2026 | | Linux | mod_http2 RHEL 8 | 0:1.15.7-10.module+el8.10.0+24521+219dcfc5.7 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | mod_http2 almalinux 8 | 1.15.7-10.module_el8.10.0+4233+8b7d9181.7 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_http2 amzn 2023 | 1:2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_http2 ol 8 | 0:1.15.7-10.module+el8.10.0+91023+3994037c.7 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_http2 rocky 8 | 0:1.15.7-10.module+el8.10.0+1775+6b057638 | [RLSA-2026:92616](https://patchblox.com/security/data/fix/linux/rlsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_http2-debuginfo amzn 2023 | 1:2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_ldap RHEL 8 | 0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | mod_ldap RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | mod_ldap almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_ldap almalinux 8 | 2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_ldap almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_ldap amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_ldap ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_ldap ol 8 | 0:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_ldap ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_ldap-debuginfo amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_lua RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | mod_lua almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_lua almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_lua amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_lua ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_lua ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_lua-debuginfo amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_md RHEL 8 | 1:2.0.8-8.module+el8.10.0+24941+3af7c60a.4 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | mod_md almalinux 8 | 1:2.0.8-8.module_el8.10.0+4295+280de5aa.4 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_md ol 8 | 1:2.0.8-8.module+el8.10.0+91092+d4ec9ae3.4 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_md rocky 8 | 1:2.0.8-8.module+el8.10.0+40053+5a18018e.2 | [RLSA-2026:92616](https://patchblox.com/security/data/fix/linux/rlsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_proxy_html RHEL 8 | 1:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | mod_proxy_html RHEL 9 | 1:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | mod_proxy_html almalinux 10 | 1:2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_proxy_html almalinux 8 | 1:2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_proxy_html almalinux 9 | 1:2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_proxy_html amzn 2023 | 1:2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_proxy_html ol 10 | 1:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_proxy_html ol 8 | 1:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_proxy_html ol 9 | 1:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_proxy_html-debuginfo amzn 2023 | 1:2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_session RHEL 8 | 0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | mod_session RHEL 9 | 0:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | mod_session almalinux 10 | 2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_session almalinux 8 | 2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_session almalinux 9 | 2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_session amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_session ol 10 | 0:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_session ol 8 | 0:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_session ol 9 | 0:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_session-debuginfo amzn 2023 | 2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_ssl RHEL 8 | 1:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13 | [RHSA-2026:92616](https://patchblox.com/security/data/fix/linux/rhsa-2026-92616.md) | Oct 30, 2026 | | Linux | mod_ssl RHEL 9 | 1:2.4.62-13.el9_8.9 | [RHSA-2026:88229](https://patchblox.com/security/data/fix/linux/rhsa-2026-88229.md) | Oct 24, 2026 | | Linux | mod_ssl almalinux 10 | 1:2.4.63-13.el10_2.8 | [ALSA-2026:89860](https://patchblox.com/security/data/fix/linux/alsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_ssl almalinux 8 | 1:2.4.37-65.module_el8.10.0+4332+2bef2e0d.13 | [ALSA-2026:92616](https://patchblox.com/security/data/fix/linux/alsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_ssl almalinux 9 | 1:2.4.62-13.el9_8.9 | [ALSA-2026:88229](https://patchblox.com/security/data/fix/linux/alsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_ssl amzn 2023 | 1:2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | | Linux | mod_ssl ol 10 | 1:2.4.63-13.0.1.el10_2.8 | [ELSA-2026-89860](https://patchblox.com/security/data/fix/linux/elsa-2026-89860.md) | Nov 7, 2026 | | Linux | mod_ssl ol 8 | 1:2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8 | [ELSA-2026-92616](https://patchblox.com/security/data/fix/linux/elsa-2026-92616.md) | Nov 7, 2026 | | Linux | mod_ssl ol 9 | 1:2.4.62-13.0.1.el9_8.9 | [ELSA-2026-88229](https://patchblox.com/security/data/fix/linux/elsa-2026-88229.md) | Nov 7, 2026 | | Linux | mod_ssl-debuginfo amzn 2023 | 1:2.4.69-1.amzn2023.0.2 | [ALAS2023-2026-3202](https://patchblox.com/security/data/fix/linux/alas2023-2026-3202.md) | Nov 7, 2026 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.