RHSA-2026:13938HighCVSS 8.8
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
🔗 CVE IDs covered (5)
📋 Description
CVE-2026-23918 — Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol CVE-2026-24072 — Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation CVE-2026-33007 — httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash CVE-2026-34032 — httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check CVE-2026-34059 — httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHSA-2026:13938
- externalhttps://images.redhat.com/
- externalhttps://access.redhat.com/security/cve/CVE-2026-23918
- externalhttps://access.redhat.com/security/cve/CVE-2026-24072
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://access.redhat.com/security/cve/CVE-2026-34032
- externalhttps://access.redhat.com/security/cve/CVE-2026-33007
- externalhttps://access.redhat.com/security/cve/CVE-2026-34059
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13938.json