RHSA-2026:13938 - Security Advisory

Topic

An update for Red Hat Hardened Images RPMs is now available.

Description

This update includes the following RPMs:

httpd:

• httpd-2.4.67-0.1.hum1 (aarch64, x86_64)
• httpd-core-2.4.67-0.1.hum1 (aarch64, x86_64)
• httpd-devel-2.4.67-0.1.hum1 (aarch64, x86_64)
• httpd-filesystem-2.4.67-0.1.hum1 (noarch)
• httpd-manual-2.4.67-0.1.hum1 (noarch)
• httpd-tools-2.4.67-0.1.hum1 (aarch64, x86_64)
• mod_ldap-2.4.67-0.1.hum1 (aarch64, x86_64)
• mod_lua-2.4.67-0.1.hum1 (aarch64, x86_64)
• mod_proxy_html-2.4.67-0.1.hum1 (aarch64, x86_64)
• mod_session-2.4.67-0.1.hum1 (aarch64, x86_64)
• mod_ssl-2.4.67-0.1.hum1 (aarch64, x86_64)
• httpd-2.4.67-0.1.hum1.src (src)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://images.redhat.com/

Affected Products

• Red Hat Hardened Images

Fixes

CVEs

• CVE-2026-23918
• CVE-2026-24072
• CVE-2026-34032
• CVE-2026-33007
• CVE-2026-34059
• CVE-2026-33857

References

• https://images.redhat.com/
• https://access.redhat.com/security/updates/classification/