Merge PR "[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade httpd to 2.4.68 for CVE-2026-49975 - branch 3.0-dev" microsoft#17662

Author: CBL-Mariner-Bot

SPECS/httpd/httpd.signatures.json

@@ -10,6 +10,6 @@
     "httpd-ssl-pass-dialog": "b9bd4816dda673ad9294a0fbd2904fac9b96eabddb4d72080ae58b498bcd1db9",
     "macros.httpd": "6dbf9313a5d085cb705fa5ef393372ec940008f08bf1c9350f8f49d58df75dff",
     "ssl.conf": "6690cb873d2312d0ecffcda3822562cd1b1b11ac44b1fcb7bd1b720a9e53c333",
-    "httpd-2.4.67.tar.bz2": "66cd206637b0d5c446fa7dabe75fe03525da8fb55855876c46288cd88b136aa4"
+    "httpd-2.4.68.tar.bz2": "68c74d4df38c26bed4dfbdb8f3baf1eb532f3872357becc1bba5d136f6b63c06"
   }
 }

SPECS/httpd/httpd.spec

@@ -2,7 +2,7 @@
 %define _confdir %{_sysconfdir}
 Summary:        The Apache HTTP Server
 Name:           httpd
-Version:        2.4.67
+Version:        2.4.68
 Release:        1%{?dist}
 License:        Apache-2.0
 Vendor:         Microsoft Corporation
@@ -345,6 +345,9 @@ fi
 %{_libexecdir}/httpd-ssl-pass-dialog
 
 %changelog
+* Mon Jun 08 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 2.4.68-1
+- Auto-upgrade to 2.4.68 - for CVE-2026-49975
+
 * Thu May 07 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 2.4.67-1
 - Auto-upgrade to 2.4.67 - for CVE-2026-29168, CVE-2026-24072, CVE-2026-34059, CVE-2026-23918, CVE-2026-33857, CVE-2026-34032, CVE-2026-33006, CVE-2026-33007, CVE-2026-29169, CVE-2026-33523
 

cgmanifest.json

@@ -5490,8 +5490,8 @@
         "type": "other",
         "other": {
           "name": "httpd",
-          "version": "2.4.67",
-          "downloadUrl": "https://archive.apache.org/dist/httpd/httpd-2.4.67.tar.bz2"
+          "version": "2.4.68",
+          "downloadUrl": "https://archive.apache.org/dist/httpd/httpd-2.4.68.tar.bz2"
         }
       }
     },