Release date:
2026-10-09 13:17:01 UTC
Description:
- CVE-2026-63292: mod_vhost_alias: bound the interpolated path in
vhost_alias_interpolate() (stack buffer overflow)
- CVE-2026-56154: mod_rewrite: fix use-after-free in lookup_variable()
with %{LA-U:HTTP:...}
- CVE-2026-46729: mod_heartmonitor: validate body and query in hm_handler()
(NULL pointer dereference)
- CVE-2026-56449: mod_proxy_html: do not dump content in pcomment()
(out-of-bounds write)
- CVE-2026-63686: mod_xml2enc: fix NULL pointer dereference in
xml2enc_ffunc() on charset conversion failure
- CVE-2026-63718: mod_proxy_uwsgi: fix Transfer-Encoding response
smuggling in uwsgi_response()
- CVE-2026-73636, CVE-2026-73637: mod_auth_digest: fix one-time-nonce
replay and authentication state use-after-free (upstream 2.4.69 merge);
AuthDigestQop now accepts only "auth" and RFC 2069 requests without
qop are rejected
Updated packages:
-
httpd-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:428d20b0a46c56ba93ea341e16f33b65899da7af676e1c36e1e813a0e7530e30
-
httpd-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:ad21cc30c2cf75d452aa99eaa698b3b4b58f83cfcf20e2d5be06d42ddd9771b3
-
httpd-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:500584ea34733f9f71d57a35042cbfac5d61b156b22cd9079edf247ee85c36d0
-
httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:10f769e2b199aeb8e8d89cc428d720ce2361d3cc13b58d9a5af83a8db1e5baf3
-
httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:84a3c9df3193a28559b3de9831eba47099cf1cacb2b9d0abd9ab6fb543a5636b
-
httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:844738437d5ec78d3c5ecfca266da4f72aba68edadb711567e19479fea50d133
-
httpd-filesystem-2.4.68-1.amzn2.0.1.tuxcare.els3.noarch.rpm
sha:d1f88a35168a3f5321e1616d827affb9ac1c8fd8769fda84dc1252330640e3d1
-
httpd-manual-2.4.68-1.amzn2.0.1.tuxcare.els3.noarch.rpm
sha:27b8b21472c4acd37bb8b612d0ebb57a79119a4c7e3229f1f84390bb355f8c03
-
httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:1aac15463f4f89e93c4620ef3c92459b64448bb55ca22a92c7060ac13c5aee15
-
httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:95bb4e853ccc53e039ec87181370de8f87d5fb0ab1c2560c2db25adc23dab234
-
httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:82d06a793a8b9ac2e687a631690bd57e15068279d8c873cf5e5ee82807e81ad3
-
mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:4c51b91dbbbd072e51acbe88abe2e6e2a4951093128d871c52ccf875048db1a3
-
mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:1605efb432a4d26d0f38ede36095e3bac99b08a7713d8a4cb1e66cf5bfc19069
-
mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:74f65d8fcb5211c1f191c61535136652d1b7eecf463ce0b09694bc52c7f25d0f
-
mod_md-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:bdd3884ec5f30b8baaefdb3031cd7fb7e0635c6f00e8e58be2b861672dbfe449
-
mod_md-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:500a2377090de64868b558e06c48023f3f1b8ac0568bf204a24a6b7596f061df
-
mod_md-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:c7b6119d81685d1503b0597139ec2f7bc5450edb6f9fe1a36616fa1255a0d614
-
mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:26dc0dd10ca07b37da7a5c8e011753963fab2d8fd8bc7934c4d67d7859a74f9d
-
mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:e37318c68b0f084a560ad224e88217bfcc62b7c1a73cc1a544af099263420631
-
mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:2cda13059ff555243a08d332bc9e0b79e22700ee760a555a9f1fd5fd2c507282
-
mod_session-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:dcb784b2d7a546e9b07b21be63c516a6531362f1b90eeaaac601f03c8008edfc
-
mod_session-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:0fc1dfc5c3e42b2f6e1a8f6492c53b5f77c3634de1c516c2e51b66ba442da0b9
-
mod_session-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:ec11a9935cbc5456e2c4d161c502a9a55be2ae8c45294e5a53d885bf070d3698
-
mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm
sha:337a328cdca047d660512e35cc41e3006b9bc027c77a7518e7f091374c0df45c
-
mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm
sha:9656adabb8a738e4e918bed46907813e21fad2fc9dc7dd7a419c6320c2c10edd
-
mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm
sha:2bb6f3aff50c301c47a9c3095053d1bab210bbbb1065a20618633a6240cbbc6b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
