ELSA-2026-30845

ELSA-2026-30845 - mod_md security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-07-16

Description

[1:2.4.26-5.1]
- Resolves: RHEL-175647 - mod_md: OCSP response limits
(CVE-2026-29168)

[1:2.4.26-5]
- Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
retry intervals (CVE-2025-55753)

[1:2.4.26-3]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018

[1:2.4.26-2]
- Bump release for June 2024 mass rebuild

[1:2.4.26-1]
- update to 2.4.26

[1:2.4.25-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.4.25-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.4.25-1]
- update to 2.4.25

[1:2.4.24-1]
- new version 2.4.24

[1:2.4.21-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Related CVEs

CVE-2026-29168

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	mod_md-2.4.26-5.el10_2.1.src.rpm	050af5bb25029c69b70ee13e7168abaa090531f84c5a9137a1b448124444a918	-	ol10_aarch64_appstream
	mod_md-2.4.26-5.el10_2.1.aarch64.rpm	8679412b46b4f1a93b75efce370e1b0ce763dae6fdf61658308e8baa58c599cc	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	mod_md-2.4.26-5.el10_2.1.src.rpm	050af5bb25029c69b70ee13e7168abaa090531f84c5a9137a1b448124444a918	-	ol10_x86_64_appstream
	mod_md-2.4.26-5.el10_2.1.x86_64.rpm	f35126de2671afb2dd898180eb46dc15cc33577234b8e4d596ba6c15c8a66165	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team