Packages
- apache2 - Apache HTTP server
Details
It was discovered that Apache HTTP Server's mod_ldap module incorrectly
handled memory when processing per-directory configurations. A remote
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. (CVE-2026-29167)
It was discovered that Apache HTTP Server's mod_proxy_ftp module
incorrectly handled HTML generation for FTP directory listings. A remote
attacker could possibly use this issue to inject arbitrary web script or
HTML. (CVE-2026-29170)
Nitescu Lucian discovered that Apache HTTP Server's mod_auth_digest module
was vulnerable to a timing attack. A remote attacker could possibly use
this issue to bypass Digest authentication. (CVE-2026-33006)
It was discovered that Apache HTTP Server's mod_ldap module incorrectly
handled memory when processing per-directory configurations. A remote
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. (CVE-2026-29167)
It was discovered that Apache HTTP Server's mod_proxy_ftp module
incorrectly handled HTML generation for FTP directory listings. A remote
attacker could possibly use this issue to inject arbitrary web script or
HTML. (CVE-2026-29170)
Nitescu Lucian discovered that Apache HTTP Server's mod_auth_digest module
was vulnerable to a timing attack. A remote attacker could possibly use
this issue to bypass Digest authentication. (CVE-2026-33006)
Update instructions
After a standard system update you need to restart apache2 to make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 20.04 LTS focal | apache2 – 2.4.41-4ubuntu3.23+esm6 | ||
| apache2-bin – 2.4.41-4ubuntu3.23+esm6 | |||
| apache2-dev – 2.4.41-4ubuntu3.23+esm6 | |||
| apache2-ssl-dev – 2.4.41-4ubuntu3.23+esm6 | |||
| apache2-suexec-custom – 2.4.41-4ubuntu3.23+esm6 | |||
| apache2-suexec-pristine – 2.4.41-4ubuntu3.23+esm6 | |||
| apache2-utils – 2.4.41-4ubuntu3.23+esm6 | |||
| libapache2-mod-md – 2.4.41-4ubuntu3.23+esm6 | |||
| libapache2-mod-proxy-uwsgi – 2.4.41-4ubuntu3.23+esm6 | |||
| 18.04 LTS bionic | apache2 – 2.4.29-1ubuntu4.27+esm11 | ||
| apache2-bin – 2.4.29-1ubuntu4.27+esm11 | |||
| apache2-dev – 2.4.29-1ubuntu4.27+esm11 | |||
| apache2-ssl-dev – 2.4.29-1ubuntu4.27+esm11 | |||
| apache2-suexec-custom – 2.4.29-1ubuntu4.27+esm11 | |||
| apache2-suexec-pristine – 2.4.29-1ubuntu4.27+esm11 | |||
| apache2-utils – 2.4.29-1ubuntu4.27+esm11 | |||
| 16.04 LTS xenial | apache2 – 2.4.18-2ubuntu3.17+esm20 | ||
| apache2-bin – 2.4.18-2ubuntu3.17+esm20 | |||
| apache2-dev – 2.4.18-2ubuntu3.17+esm20 | |||
| apache2-suexec-custom – 2.4.18-2ubuntu3.17+esm20 | |||
| apache2-suexec-pristine – 2.4.18-2ubuntu3.17+esm20 | |||
| apache2-utils – 2.4.18-2ubuntu3.17+esm20 | |||
| 14.04 LTS trusty | apache2 – 2.4.7-1ubuntu4.22+esm15 | ||
| apache2-bin – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-dev – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-mpm-event – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-mpm-itk – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-mpm-prefork – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-mpm-worker – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-suexec – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-suexec-custom – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-suexec-pristine – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2-utils – 2.4.7-1ubuntu4.22+esm15 | |||
| apache2.2-bin – 2.4.7-1ubuntu4.22+esm15 | |||
| libapache2-mod-macro – 1:2.4.7-1ubuntu4.22+esm15 | |||
| libapache2-mod-proxy-html – 1:2.4.7-1ubuntu4.22+esm15 | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.