MGASA-2026-0129: apache Mageia

Vulnerability summary

MGASA-2026-0129 is a vulnerability in apache Mageia with no CVSS score yet.

Timeline

1. 13-05-2026
   PublishedVulnerability first disclosed.
2. 13-05-2026
   Last modifiedVulnerability information updated.

Description

Updated apache packages fix security vulnerabilities http2: double free and possible RCE on early reset. (CVE-2026-23918) mod_rewrite elevation of privileges via ap_expr. (CVE-2026-24072) buffer overflow in mod_proxy_ajp via ajp_msg_check_header(). (CVE-2026-28780) mod_md unrestricted OCSP response. (CVE-2026-29168) mod_dav_lock indirect lock crash. (CVE-2026-29169) mod_auth_digest timing attack. (CVE-2026-33006) mod_authn_socache crash. (CVE-2026-33007) HTTP response splitting forwarding malicious status line. (CVE-2026-33523) Off-by-one OOB reads in AJP getter functions. (CVE-2026-33857) Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string). (CVE-2026-34032) Heap Over-Read and memory disclosure in ajp_parse_data(). (CVE-2026-34059)

No weakness data has been published for this record.