An update for httpd is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-2811 Final 1.0 1.0 2026-07-06 Initial 2026-07-06 2026-07-06 openEuler SA Tool V1.0 2026-07-06 httpd security update An update for httpd is now available for openEuler-20.03-LTS-SP4 Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es): Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.(CVE-2026-43951) Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.(CVE-2026-44119) An update for httpd is now available for openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium httpd https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2811 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-43951 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-44119 https://nvd.nist.gov/vuln/detail/CVE-2026-43951 https://nvd.nist.gov/vuln/detail/CVE-2026-44119 openEuler-20.03-LTS-SP4 httpd-filesystem-2.4.43-39.oe2003sp4.noarch.rpm httpd-help-2.4.43-39.oe2003sp4.noarch.rpm httpd-2.4.43-39.oe2003sp4.aarch64.rpm httpd-debuginfo-2.4.43-39.oe2003sp4.aarch64.rpm httpd-debugsource-2.4.43-39.oe2003sp4.aarch64.rpm httpd-devel-2.4.43-39.oe2003sp4.aarch64.rpm httpd-tools-2.4.43-39.oe2003sp4.aarch64.rpm mod_ldap-2.4.43-39.oe2003sp4.aarch64.rpm mod_md-2.4.43-39.oe2003sp4.aarch64.rpm mod_proxy_html-2.4.43-39.oe2003sp4.aarch64.rpm mod_session-2.4.43-39.oe2003sp4.aarch64.rpm mod_ssl-2.4.43-39.oe2003sp4.aarch64.rpm httpd-2.4.43-39.oe2003sp4.src.rpm httpd-2.4.43-39.oe2003sp4.x86_64.rpm httpd-debuginfo-2.4.43-39.oe2003sp4.x86_64.rpm httpd-debugsource-2.4.43-39.oe2003sp4.x86_64.rpm httpd-devel-2.4.43-39.oe2003sp4.x86_64.rpm httpd-tools-2.4.43-39.oe2003sp4.x86_64.rpm mod_ldap-2.4.43-39.oe2003sp4.x86_64.rpm mod_md-2.4.43-39.oe2003sp4.x86_64.rpm mod_proxy_html-2.4.43-39.oe2003sp4.x86_64.rpm mod_session-2.4.43-39.oe2003sp4.x86_64.rpm mod_ssl-2.4.43-39.oe2003sp4.x86_64.rpm Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. 2026-07-06 CVE-2026-43951 openEuler-20.03-LTS-SP4 Medium 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N httpd security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2811 Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue. 2026-07-06 CVE-2026-44119 openEuler-20.03-LTS-SP4 Medium 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N httpd security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2811