Red Hat Product Errata RHSA-2026:30845 - Security Advisory Issued: 2026-06-29 Updated: 2026-06-29 RHSA-2026:30845 - Security Advisory Overview Updated Packages Synopsis Moderate: mod_md security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for mod_md is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fix(es): httpd: mod_md: unrestricted OCSP response leads to resource exhaustion (CVE-2026-29168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2466753 - CVE-2026-29168 httpd: mod_md: unrestricted OCSP response leads to resource exhaustion CVEs CVE-2026-29168 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 x86_64 mod_md-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 873f843edecfe40af251c4abc134da5918e11600cd179ac5e1b6998573fea88a mod_md-debuginfo-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: db2c04e6bceb6a0f6a22116058363d593563a225cbe4d0b04e3b418afe1c21bd mod_md-debugsource-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 8159b73fd858ef815e5e2608a799841f02e1a12f2441cf5d5699b7867fb6433f Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 x86_64 mod_md-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 873f843edecfe40af251c4abc134da5918e11600cd179ac5e1b6998573fea88a mod_md-debuginfo-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: db2c04e6bceb6a0f6a22116058363d593563a225cbe4d0b04e3b418afe1c21bd mod_md-debugsource-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 8159b73fd858ef815e5e2608a799841f02e1a12f2441cf5d5699b7867fb6433f Red Hat Enterprise Linux for IBM z Systems 10 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 s390x mod_md-2.4.26-5.el10_2.1.s390x.rpm SHA-256: db54428047374d2b141c901be543cc81012f99effbd8cd558c646bf6b3aaa254 mod_md-debuginfo-2.4.26-5.el10_2.1.s390x.rpm SHA-256: eb510aab779a500f7ff59f5a65e4a64465be57d8c278d5fb1bcbdd4512e4312d mod_md-debugsource-2.4.26-5.el10_2.1.s390x.rpm SHA-256: a7411a7bcdc71f7041b674567ae8d1ebfd8cb37c9ebf11bb26221f2ba1a78e27 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 s390x mod_md-2.4.26-5.el10_2.1.s390x.rpm SHA-256: db54428047374d2b141c901be543cc81012f99effbd8cd558c646bf6b3aaa254 mod_md-debuginfo-2.4.26-5.el10_2.1.s390x.rpm SHA-256: eb510aab779a500f7ff59f5a65e4a64465be57d8c278d5fb1bcbdd4512e4312d mod_md-debugsource-2.4.26-5.el10_2.1.s390x.rpm SHA-256: a7411a7bcdc71f7041b674567ae8d1ebfd8cb37c9ebf11bb26221f2ba1a78e27 Red Hat Enterprise Linux for Power, little endian 10 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 ppc64le mod_md-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: 092d0a0f6f17b6b8522041941b882166e1d589903fc6116313c2a4475a2e620f mod_md-debuginfo-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: fca5ca2e793de9fd772b1ca5a2ebe9a2d31b8b693fce097b5586286a3fec7b6b mod_md-debugsource-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: 08dbb0b5b2aa7d5d0e6796f43cd59d767ed600ffabb750411948402f6271f3c1 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 ppc64le mod_md-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: 092d0a0f6f17b6b8522041941b882166e1d589903fc6116313c2a4475a2e620f mod_md-debuginfo-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: fca5ca2e793de9fd772b1ca5a2ebe9a2d31b8b693fce097b5586286a3fec7b6b mod_md-debugsource-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: 08dbb0b5b2aa7d5d0e6796f43cd59d767ed600ffabb750411948402f6271f3c1 Red Hat Enterprise Linux for ARM 64 10 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 aarch64 mod_md-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: 36df6e939cb6c314e8bea1322b6d3d551dc5066fa04a072b45f715d17a87b04b mod_md-debuginfo-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: f236af421d52f081f0ae9a4df3f08d3f3668694d56f5b07489eeff44377841f6 mod_md-debugsource-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: bb02d9e065bdf27f91315f71c08ba210b371270cb82405f101cc44be39529462 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 aarch64 mod_md-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: 36df6e939cb6c314e8bea1322b6d3d551dc5066fa04a072b45f715d17a87b04b mod_md-debuginfo-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: f236af421d52f081f0ae9a4df3f08d3f3668694d56f5b07489eeff44377841f6 mod_md-debugsource-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: bb02d9e065bdf27f91315f71c08ba210b371270cb82405f101cc44be39529462 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 aarch64 mod_md-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: 36df6e939cb6c314e8bea1322b6d3d551dc5066fa04a072b45f715d17a87b04b mod_md-debuginfo-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: f236af421d52f081f0ae9a4df3f08d3f3668694d56f5b07489eeff44377841f6 mod_md-debugsource-2.4.26-5.el10_2.1.aarch64.rpm SHA-256: bb02d9e065bdf27f91315f71c08ba210b371270cb82405f101cc44be39529462 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 s390x mod_md-2.4.26-5.el10_2.1.s390x.rpm SHA-256: db54428047374d2b141c901be543cc81012f99effbd8cd558c646bf6b3aaa254 mod_md-debuginfo-2.4.26-5.el10_2.1.s390x.rpm SHA-256: eb510aab779a500f7ff59f5a65e4a64465be57d8c278d5fb1bcbdd4512e4312d mod_md-debugsource-2.4.26-5.el10_2.1.s390x.rpm SHA-256: a7411a7bcdc71f7041b674567ae8d1ebfd8cb37c9ebf11bb26221f2ba1a78e27 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 ppc64le mod_md-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: 092d0a0f6f17b6b8522041941b882166e1d589903fc6116313c2a4475a2e620f mod_md-debuginfo-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: fca5ca2e793de9fd772b1ca5a2ebe9a2d31b8b693fce097b5586286a3fec7b6b mod_md-debugsource-2.4.26-5.el10_2.1.ppc64le.rpm SHA-256: 08dbb0b5b2aa7d5d0e6796f43cd59d767ed600ffabb750411948402f6271f3c1 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 x86_64 mod_md-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 873f843edecfe40af251c4abc134da5918e11600cd179ac5e1b6998573fea88a mod_md-debuginfo-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: db2c04e6bceb6a0f6a22116058363d593563a225cbe4d0b04e3b418afe1c21bd mod_md-debugsource-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 8159b73fd858ef815e5e2608a799841f02e1a12f2441cf5d5699b7867fb6433f Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 x86_64 mod_md-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 873f843edecfe40af251c4abc134da5918e11600cd179ac5e1b6998573fea88a mod_md-debuginfo-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: db2c04e6bceb6a0f6a22116058363d593563a225cbe4d0b04e3b418afe1c21bd mod_md-debugsource-2.4.26-5.el10_2.1.x86_64.rpm SHA-256: 8159b73fd858ef815e5e2608a799841f02e1a12f2441cf5d5699b7867fb6433f Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 SRPM mod_md-2.4.26-5.el10_2.1.src.rpm SHA-256: 7eb6b444b87134e39e71f72222115513774065280c8feab8af1539b218ab5ee9 aa