Alpine/apache2: medium 4.8

A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.

Action: Upgrade apache2 to 2.4.67-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2026-33006#Alpine:v3.24/apache2
• https://security.alpinelinux.org/vuln/CVE-2026-33006

published 2026-05-04T15:16:03.977Z · modified 2026-10-01T02:17:49.242067426Z · JSON