[CLSA-2026:1791396690] httpd: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-07 18:11:45 UTC
Description:
- CVE-2026-56153: fix mod_charset_lite heap overflow in finish_partial_char() - CVE-2026-46729: fix mod_heartmonitor NULL pointer dereference in the heartbeat handler - CVE-2026-56154: fix mod_rewrite use-after-free with LA-U/LA-F lookahead of HTTP headers - CVE-2026-56449: fix mod_proxy_html out-of-bounds write in dump_content() - CVE-2026-63292: fix mod_vhost_alias stack buffer overflow on overlong host names
Updated packages:
  • httpd-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.i686.rpm
    sha:2a7a8ae05a3e6a04d3e76e6ca97c9f5bc36bcaa1aff4739bf2ab6e56a8aa076d
  • httpd-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.x86_64.rpm
    sha:04720355cf8b2dfcc928c7e0b447b95594fa3f8236698efdec671a5229e63732
  • httpd-devel-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.i686.rpm
    sha:3e9d9df7dd029ddc69708963484c40d409cc8ad025648ddd0a7d9dc9fea6c4ca
  • httpd-devel-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.x86_64.rpm
    sha:04c9d5218dd217057cfd1af7a8eefe4e68459cdd7f1cc686f86b6135e1f6c839
  • httpd-filesystem-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.noarch.rpm
    sha:6873207c642e8f87475a0958d4303061f147721a7fc9a5c5b8be272cb5e0d841
  • httpd-manual-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.noarch.rpm
    sha:8f0e947ba870cd76b3adb9488393cc4dfcb174f4824452629ac3656601269425
  • httpd-tools-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.i686.rpm
    sha:5e255d5204ed9d37bfd9c8f5d997a35e38d383bd24d2abb84779560ae988e87a
  • httpd-tools-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.x86_64.rpm
    sha:49812e58dd100bbf0e7c2743815178b81215e31307a96565ce4c5dce1ae49d43
  • mod_ldap-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.i686.rpm
    sha:5eed4a75262320ce33c5857622d17a7655f0b44596fab958bf8b45e1626b7107
  • mod_ldap-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.x86_64.rpm
    sha:ef3685d9e8bb2affabb900e2d1665c8f7d4ed4953dd93c84cae9975a50dd1c04
  • mod_proxy_html-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.i686.rpm
    sha:1d5c3930288633c2508a2d4f22d01b1b43aaa12705e6570138b8b3d221859545
  • mod_proxy_html-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.x86_64.rpm
    sha:0f79250a65cc83bb0e4327e1e665435382b4d5ad0be69cd7344af062479d9794
  • mod_session-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.i686.rpm
    sha:5759af9b6e96e5c7369b83d53478dfb50fba1217dd9cce1a46928635bae53f8e
  • mod_session-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.x86_64.rpm
    sha:f8157d89184f1a9c714de4d997749fad67ccaaf55e8fe874cc59cd959bbf68ea
  • mod_ssl-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.i686.rpm
    sha:fc31d583556b5d8b8ba43213e5ce75c2d22b35cd0090c710f8b7e1c25c177ec9
  • mod_ssl-2.4.37-64.module_el8+2637+9ff88676.tuxcare.els9.x86_64.rpm
    sha:95c45c46bc56d85e24c2f0a46f1caa4eaf575ad2ad0f7adaaea311aa9b9f05cc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.