Red Hat Product Errata RHSA-2026:57641 - Security Advisory Issued: 2026-08-20 Updated: 2026-08-20 RHSA-2026:57641 - Security Advisory Overview Updated Packages Synopsis Moderate: mod_md security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for mod_md is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fix(es): httpd: mod_md: unrestricted OCSP response leads to resource exhaustion (CVE-2026-29168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2466753 - CVE-2026-29168 httpd: mod_md: unrestricted OCSP response leads to resource exhaustion CVEs CVE-2026-29168 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 x86_64 mod_md-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 0dac73ec3b9c123eca9cf021258e86c2cb6d5bfba5959a77c983b683f89dfa49 mod_md-debuginfo-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 7192fee020f525aeac58166643059b93d9d32b8c1bb8323f01c46556651e40db mod_md-debugsource-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 224db98d0fdfd32db06e992d15dd5272e72eda44217c5bc26a55c44dffc3eadd Red Hat Enterprise Linux Server - AUS 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 x86_64 mod_md-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 0dac73ec3b9c123eca9cf021258e86c2cb6d5bfba5959a77c983b683f89dfa49 mod_md-debuginfo-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 7192fee020f525aeac58166643059b93d9d32b8c1bb8323f01c46556651e40db mod_md-debugsource-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 224db98d0fdfd32db06e992d15dd5272e72eda44217c5bc26a55c44dffc3eadd Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 s390x mod_md-2.4.26-1.el9_6.2.s390x.rpm SHA-256: 535bec85d95d9a9c4d72cb2499a0047e4feb71f917988353c33f8fbdae6b25b9 mod_md-debuginfo-2.4.26-1.el9_6.2.s390x.rpm SHA-256: d852d10291a132cdb5d806acd5b170455beb927e62dbc13d62d2e006962c63c6 mod_md-debugsource-2.4.26-1.el9_6.2.s390x.rpm SHA-256: 4e45e14dccc7575c68805ce1afe1549fa97f0284b7602cec9d36cbdc76e31d83 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 ppc64le mod_md-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: 005f0fb8cc18fca4b0762ff69fbd158c9eb8c8ceffaf64192c81bd80dc1b3d61 mod_md-debuginfo-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: dcfba35541248a5a784fa620a98299f68c1d584cdde5dfb51fa3ce2f4179a7ea mod_md-debugsource-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: 5be8c6d330c655e00d72a303f89e8e6dad142795a9f2a0dde6aeb696b6d46067 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 aarch64 mod_md-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: 8570c990f16fb86d93d34d0eb11d05762c4db8db0cbed1876a22b2c6354ffee0 mod_md-debuginfo-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: a639d4c2ba82fc5e5a8b758970e443914976e79da94ea300ab02150fb9f1fb88 mod_md-debugsource-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: 612351a9d281be850a82f3bad9fe93683ba1da4a6e1d51d4a49d37380a3a3599 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 ppc64le mod_md-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: 005f0fb8cc18fca4b0762ff69fbd158c9eb8c8ceffaf64192c81bd80dc1b3d61 mod_md-debuginfo-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: dcfba35541248a5a784fa620a98299f68c1d584cdde5dfb51fa3ce2f4179a7ea mod_md-debugsource-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: 5be8c6d330c655e00d72a303f89e8e6dad142795a9f2a0dde6aeb696b6d46067 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 x86_64 mod_md-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 0dac73ec3b9c123eca9cf021258e86c2cb6d5bfba5959a77c983b683f89dfa49 mod_md-debuginfo-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 7192fee020f525aeac58166643059b93d9d32b8c1bb8323f01c46556651e40db mod_md-debugsource-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 224db98d0fdfd32db06e992d15dd5272e72eda44217c5bc26a55c44dffc3eadd Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 aarch64 mod_md-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: 8570c990f16fb86d93d34d0eb11d05762c4db8db0cbed1876a22b2c6354ffee0 mod_md-debuginfo-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: a639d4c2ba82fc5e5a8b758970e443914976e79da94ea300ab02150fb9f1fb88 mod_md-debugsource-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: 612351a9d281be850a82f3bad9fe93683ba1da4a6e1d51d4a49d37380a3a3599 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 s390x mod_md-2.4.26-1.el9_6.2.s390x.rpm SHA-256: 535bec85d95d9a9c4d72cb2499a0047e4feb71f917988353c33f8fbdae6b25b9 mod_md-debuginfo-2.4.26-1.el9_6.2.s390x.rpm SHA-256: d852d10291a132cdb5d806acd5b170455beb927e62dbc13d62d2e006962c63c6 mod_md-debugsource-2.4.26-1.el9_6.2.s390x.rpm SHA-256: 4e45e14dccc7575c68805ce1afe1549fa97f0284b7602cec9d36cbdc76e31d83 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 x86_64 mod_md-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 0dac73ec3b9c123eca9cf021258e86c2cb6d5bfba5959a77c983b683f89dfa49 mod_md-debuginfo-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 7192fee020f525aeac58166643059b93d9d32b8c1bb8323f01c46556651e40db mod_md-debugsource-2.4.26-1.el9_6.2.x86_64.rpm SHA-256: 224db98d0fdfd32db06e992d15dd5272e72eda44217c5bc26a55c44dffc3eadd Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 aarch64 mod_md-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: 8570c990f16fb86d93d34d0eb11d05762c4db8db0cbed1876a22b2c6354ffee0 mod_md-debuginfo-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: a639d4c2ba82fc5e5a8b758970e443914976e79da94ea300ab02150fb9f1fb88 mod_md-debugsource-2.4.26-1.el9_6.2.aarch64.rpm SHA-256: 612351a9d281be850a82f3bad9fe93683ba1da4a6e1d51d4a49d37380a3a3599 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 ppc64le mod_md-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: 005f0fb8cc18fca4b0762ff69fbd158c9eb8c8ceffaf64192c81bd80dc1b3d61 mod_md-debuginfo-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: dcfba35541248a5a784fa620a98299f68c1d584cdde5dfb51fa3ce2f4179a7ea mod_md-debugsource-2.4.26-1.el9_6.2.ppc64le.rpm SHA-256: 5be8c6d330c655e00d72a303f89e8e6dad142795a9f2a0dde6aeb696b6d46067 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 SRPM mod_md-2.4.26-1.el9_6.2.src.rpm SHA-256: 095ad04797f26e1e091ce49b2b29673c7083b0af145701a0636f6c5cb8fc7fe0 s390x mod_md-2.4.26-1.el9_6.2.s390x.rpm SHA-256: 535bec85d95d9a9c4d72cb2499a0047e4feb71f917988353c33f8fbdae6b25b9 mod_md-debuginfo-2.4.26-1.el9_6.2.s390x.rpm SHA-256: d852d10291a132cdb5d806acd5b170455beb927e62dbc13d62d2e006962c63c6 mod_md-debugsource-2.4.26-1.el9_6.2.s390x.rpm SHA-256: 4e45e14dccc7575c68805ce1afe1549fa97f0284b7602cec9d36cbdc76e31d83 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .