[CLSA-2026:1787937441] mod_http2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 15:37:20 UTC
Description:
- CVE-2026-43951: fix out-of-bounds read when merging duplicate Content-Language response headers
CVEs fixed:
Updated packages:
  • mod_http2-1.15.19-5.el9_2.0.tuxcare.els2.aarch64.rpm
    sha:ced27311c8cd9c694835cbad948b739d33344922b0fe934bb47ad5f5a1609453
  • mod_http2-1.15.19-5.el9_2.0.tuxcare.els2.i686.rpm
    sha:6b721022f8d885f2ce2de1506e6a12a82058316747bfe22d0d9cd7dd30984a86
  • mod_http2-1.15.19-5.el9_2.0.tuxcare.els2.x86_64.rpm
    sha:e68e9a3e84c911e000a0d9273f93ab6504b54798ae75b37fa737e030b279f061
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.