The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.
Users are recommended to upgrade to version 2.4.69, which fixes this issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mod_sessionUpgrade mod_luaUpgrade httpd-manualUpgrade httpdUpgrade mod_ldapUpgrade httpd-coreUpgrade httpd-toolsUpgrade mod_sslUpgrade httpd-filesystemUpgrade mod_proxy_htmlUpgrade httpd-devel | Oct 25, 2026 | Oct 22, 2026 |
| Alpine Linux | — | Upgrade apache2 | Oct 5, 2026 | Oct 1, 2026 |
| Amazon Linux Ami 2 | — | Upgrade mod_sessionUpgrade mod_mdUpgrade httpd-develUpgrade mod_proxy_htmlUpgrade httpd-debuginfoUpgrade mod_sslUpgrade httpd-manualUpgrade httpdUpgrade mod_ldapUpgrade httpd-filesystemUpgrade mod_http2Upgrade httpd-tools | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade mod_ldap-debuginfoUpgrade httpd-core-debuginfoUpgrade httpd-filesystemUpgrade mod_session-debuginfoUpgrade mod_http2Upgrade mod_sslUpgrade mod_ssl-debuginfoUpgrade mod_http2-debuginfoUpgrade mod_proxy_htmlUpgrade httpd-develUpgrade mod_lua-debuginfoUpgrade httpd-debugsourceUpgrade httpd-toolsUpgrade httpd-debuginfoUpgrade mod_ldapUpgrade mod_sessionUpgrade mod_proxy_html-debuginfoUpgrade httpdUpgrade httpd-tools-debuginfoUpgrade httpd-coreUpgrade mod_luaUpgrade httpd-manual | Oct 13, 2026 | Oct 1, 2026 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Oct 2, 2026 | Oct 1, 2026 |
| Debian | — | Upgrade apache2 | Oct 20, 2026 | Oct 1, 2026 |
| Freebsd | — | Upgrade apache24 | Oct 5, 2026 | Oct 1, 2026 |
| Redhat_linux | — | Upgrade httpd-toolsUpgrade mod_lua-debuginfoUpgrade httpd-manualUpgrade mod_sslUpgrade httpdUpgrade httpd-develUpgrade mod_luaUpgrade httpd-coreUpgrade httpd-tools-debuginfoNo solution existsUpgrade httpd-debuginfoUpgrade mod_ssl-debuginfoUpgrade mod_session-debuginfoUpgrade mod_sessionUpgrade mod_ldapUpgrade httpd-core-debuginfoUpgrade mod_ldap-debuginfoUpgrade mod_proxy_html-debuginfoUpgrade httpd-debugsourceUpgrade mod_proxy_htmlUpgrade httpd-filesystem | Oct 5, 2026 | Oct 1, 2026 |
| Rocky_linux | — | Upgrade mod_sslUpgrade mod_lua-debuginfoUpgrade mod_sessionUpgrade httpd-tools-debuginfoUpgrade httpd-debugsourceUpgrade httpd-develUpgrade httpdUpgrade httpd-debuginfoUpgrade mod_luaUpgrade mod_session-debuginfoUpgrade httpd-core-debuginfoUpgrade httpd-coreUpgrade mod_ldapUpgrade mod_proxy_html-debuginfoUpgrade mod_ldap-debuginfoUpgrade mod_ssl-debuginfoUpgrade httpd-toolsUpgrade mod_proxy_html | Oct 26, 2026 | Oct 23, 2026 |
| Ubuntu | — | Upgrade apache2-suexec (Ubuntu Pro)Upgrade apache2-suexec-pristineUpgrade apache2-mpm-prefork (Ubuntu Pro)Upgrade apache2-mpm-worker (Ubuntu Pro)Upgrade apache2-suexec-custom (Ubuntu Pro)Upgrade apache2Upgrade apache2-suexec-pristine (Ubuntu Pro)Upgrade libapache2-mod-proxy-html (Ubuntu Pro)Upgrade apache2-ssl-dev (Ubuntu Pro)Upgrade apache2-utils (Ubuntu Pro)Upgrade libapache2-mod-macro (Ubuntu Pro)Upgrade libapache2-mod-md (Ubuntu Pro)Upgrade apache2-ssl-devUpgrade apache2 (Ubuntu Pro)Upgrade apache2-dev (Ubuntu Pro)Upgrade apache2-mpm-itk (Ubuntu Pro)Upgrade apache2-binUpgrade apache2-devUpgrade apache2-suexec-customUpgrade apache2-mpm-event (Ubuntu Pro)Upgrade libapache2-mod-proxy-uwsgi (Ubuntu Pro)Upgrade apache2-utilsUpgrade apache2.2-bin (Ubuntu Pro)Upgrade libapache2-mod-proxy-uwsgiUpgrade libapache2-mod-mdUpgrade apache2-bin (Ubuntu Pro) | Oct 15, 2026 | Oct 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Oct 1, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub