Release date:
2026-06-22 14:44:40 UTC
Description:
- CVE-2026-29170: mod_proxy_ftp: XSS in generated HTML directory listing; escape entry names with ap_escape_html(ap_os_escape_path()) instead of ap_escape_uri() in href attributes
- CVE-2026-42535: mod_dav_fs: deny WebDAV access to or within the DAV_FS_STATE_DIR state directory to prevent manipulation of trusted property databases
Updated packages:
-
httpd-2.2.15-72.el6.tuxcare.els14.x86_64.rpm
sha:2720bc3c9d1f02ae4b1fd50e32056f461a4452e17f96b5b8128e1715b1a8c315
-
httpd-devel-2.2.15-72.el6.tuxcare.els14.i686.rpm
sha:75addeff757da313f0b6f88e6f4e88267a1e90181c7b5b106e5293a780957a55
-
httpd-devel-2.2.15-72.el6.tuxcare.els14.x86_64.rpm
sha:45de9c46520b106c53d770240254217645903d0deeeadedcd0682d38c5c68b26
-
httpd-manual-2.2.15-72.el6.tuxcare.els14.noarch.rpm
sha:b5adadfca5e0985361490560fbf0ae0c53c0588caaf2541e2c657e865d545bf9
-
httpd-tools-2.2.15-72.el6.tuxcare.els14.x86_64.rpm
sha:2315663c728666282e86f5d4e4a41510e29f5f013129353ace04396af25960e5
-
mod_ssl-2.2.15-72.el6.tuxcare.els14.x86_64.rpm
sha:889e998414dacfb1a4b7ecc4485a4f612d50c983256761a0613013a23ed0d2c9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
