The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.
Users are recommended to upgrade to version 2.4.69, which fixes this issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mod_http2Upgrade httpd-filesystemUpgrade mod_mdUpgrade mod_sslUpgrade mod_proxy_htmlUpgrade httpd-develUpgrade httpd-manualUpgrade httpdUpgrade mod_luaUpgrade httpd-toolsUpgrade httpd-coreUpgrade mod_ldapUpgrade mod_session | Oct 25, 2026 | Oct 22, 2026 |
| Alpine Linux | — | Upgrade apache2 | Oct 5, 2026 | Oct 1, 2026 |
| Amazon Linux Ami 2 | — | Upgrade mod_http2Upgrade httpd-toolsUpgrade httpd-manualUpgrade mod_sslUpgrade mod_proxy_htmlUpgrade httpd-develUpgrade httpd-filesystemUpgrade httpd-debuginfoUpgrade mod_mdUpgrade httpdUpgrade mod_sessionUpgrade mod_ldap | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade mod_proxy_htmlUpgrade mod_session-debuginfoUpgrade httpd-filesystemUpgrade mod_ssl-debuginfoUpgrade mod_http2-debuginfoUpgrade mod_http2Upgrade httpd-core-debuginfoUpgrade mod_ldap-debuginfoUpgrade httpd-develUpgrade mod_sslUpgrade httpd-toolsUpgrade mod_ldapUpgrade httpdUpgrade mod_sessionUpgrade mod_luaUpgrade httpd-manualUpgrade httpd-debugsourceUpgrade mod_lua-debuginfoUpgrade httpd-tools-debuginfoUpgrade httpd-coreUpgrade mod_proxy_html-debuginfoUpgrade httpd-debuginfo | Oct 13, 2026 | Oct 1, 2026 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Oct 2, 2026 | Oct 1, 2026 |
| Debian | — | Upgrade apache2 | Oct 20, 2026 | Oct 1, 2026 |
| Freebsd | — | Upgrade apache24 | Oct 5, 2026 | Oct 1, 2026 |
| Oracle_linux | — | Upgrade mod_luaUpgrade mod_mdUpgrade httpd-manualUpgrade httpd-toolsUpgrade httpdUpgrade httpd-coreUpgrade httpd-develUpgrade mod_sslUpgrade httpd-filesystemUpgrade mod_ldapUpgrade mod_http2Upgrade mod_proxy_htmlUpgrade mod_session | Oct 28, 2026 | Oct 1, 2026 |
| Redhat_linux | — | Upgrade mod_proxy_html-debuginfoUpgrade httpd-debugsourceUpgrade httpd-filesystemUpgrade mod_http2Upgrade mod_session-debuginfoUpgrade mod_sessionUpgrade mod_md-debuginfoUpgrade httpd-core-debuginfoUpgrade mod_ldapUpgrade mod_ldap-debuginfoUpgrade mod_proxy_htmlUpgrade mod_http2-debugsourceUpgrade mod_lua-debuginfoUpgrade httpd-debuginfoUpgrade httpd-tools-debuginfoUpgrade mod_md-debugsourceNo solution existsUpgrade httpd-coreUpgrade mod_mdUpgrade mod_sslUpgrade mod_http2-debuginfoUpgrade httpdUpgrade httpd-toolsUpgrade mod_luaUpgrade mod_ssl-debuginfoUpgrade httpd-manualUpgrade httpd-devel | Oct 5, 2026 | Oct 1, 2026 |
| Rocky_linux | — | Upgrade mod_ldapUpgrade httpd-coreUpgrade mod_proxy_html-debuginfoUpgrade httpd-toolsUpgrade httpd-core-debuginfoUpgrade mod_ldap-debuginfoUpgrade mod_proxy_htmlUpgrade mod_ssl-debuginfoUpgrade mod_session-debuginfoUpgrade mod_sslUpgrade httpd-debugsourceUpgrade httpd-debuginfoUpgrade httpd-develUpgrade httpdUpgrade mod_sessionUpgrade httpd-tools-debuginfoUpgrade mod_lua-debuginfoUpgrade mod_lua | Oct 26, 2026 | Oct 23, 2026 |
| Ubuntu | — | Upgrade apache2-suexec (Ubuntu Pro)Upgrade apache2Upgrade apache2-suexec-pristineUpgrade apache2-mpm-worker (Ubuntu Pro)Upgrade libapache2-mod-macro (Ubuntu Pro)Upgrade libapache2-mod-proxy-html (Ubuntu Pro)Upgrade libapache2-mod-md (Ubuntu Pro)Upgrade apache2-utils (Ubuntu Pro)Upgrade apache2-suexec-pristine (Ubuntu Pro)Upgrade apache2-ssl-dev (Ubuntu Pro)Upgrade apache2-mpm-prefork (Ubuntu Pro)Upgrade apache2-suexec-custom (Ubuntu Pro)Upgrade apache2.2-bin (Ubuntu Pro)Upgrade apache2-dev (Ubuntu Pro)Upgrade apache2 (Ubuntu Pro)Upgrade libapache2-mod-proxy-uwsgi (Ubuntu Pro)Upgrade apache2-bin (Ubuntu Pro)Upgrade libapache2-mod-proxy-uwsgiUpgrade libapache2-mod-mdUpgrade apache2-utilsUpgrade apache2-mpm-itk (Ubuntu Pro)Upgrade apache2-binUpgrade apache2-ssl-devUpgrade apache2-devUpgrade apache2-mpm-event (Ubuntu Pro)Upgrade apache2-suexec-custom | Oct 15, 2026 | Oct 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Oct 1, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub