Ubuntu USN · USN-8396-1

Apache HTTP Server vulnerabilities

Published: Mon, 08 Jun 2026 10:16

CVE-2026-29169CVE-2026-24072CVE-2026-28780CVE-2026-34059

Summary

Several security issues were fixed in Apache HTTP Server.

Details

It was discovered that the Apache HTTP Server mod_rewrite module incorrectly handled certain privileges. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-24072) Andrew Lacambra, Elhanan Haenel, Tianshuo Han, and Tristan Madani discovered that the Apache HTTP Server mod_proxy_ajp module incorrectly handled certain AJP server messages. An attacker in control of a backend AJP server could use this issue to cause Apache HTTP Server to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-28780) Pavel Kohout discovered that the Apache HTTP Server incorrectly handled certain memory operations in mod_dav_lock. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-29169) Elhanan Haenel discovered that Apache HTTP Server incorrectly handled certain memory operations in mod_proxy_ajp. A remote attacker could use this issue to cause Apache HTTP Server to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2026-34059)

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu bionic

apache2→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-bin→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-data→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-data
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-dev→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-doc→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-ssl-dev→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-ssl-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-custom→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-custom
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-pristine→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-pristine
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-utils→2.4.29-1ubuntu4.27+esm9apt_upgrade
Standard apt upgrade. Install 2.4.29-1ubuntu4.27+esm9 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu focal

apache2→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-bin→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-data→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-data
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-dev→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-doc→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-ssl-dev→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-ssl-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-custom→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-custom
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-pristine→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-pristine
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-utils→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libapache2-mod-md→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libapache2-mod-md
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libapache2-mod-proxy-uwsgi→2.4.41-4ubuntu3.23+esm4apt_upgrade
Standard apt upgrade. Install 2.4.41-4ubuntu3.23+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libapache2-mod-proxy-uwsgi
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu trusty

apache2→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-bin→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-data→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-data
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-dev→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-doc→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-mpm-event→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-mpm-event
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-mpm-itk→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-mpm-itk
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-mpm-prefork→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-mpm-prefork
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-mpm-worker→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-mpm-worker
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-custom→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-custom
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-pristine→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-pristine
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-utils→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2.2-bin→2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2.2-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libapache2-mod-macro→1:2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 1:2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libapache2-mod-macro
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libapache2-mod-proxy-html→1:2.4.7-1ubuntu4.22+esm13apt_upgrade
Standard apt upgrade. Install 1:2.4.7-1ubuntu4.22+esm13 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libapache2-mod-proxy-html
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu xenial

apache2→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-bin→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-data→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-data
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-dev→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-doc→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-custom→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-custom
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-suexec-pristine→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-suexec-pristine
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
apache2-utils→2.4.18-2ubuntu3.17+esm18apt_upgrade
Standard apt upgrade. Install 2.4.18-2ubuntu3.17+esm18 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y apache2-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8396-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8396-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.

Buy lifetime →See StackPatch →Live audit log →