[CLSA-2026:1786004455] httpd: Fix of CVE-2026-44186
Type:
security
Severity:
Important
Release date:
2026-08-06 14:56:56 UTC
Description:
- CVE-2026-44186: mod_proxy_ftp: infinite loop in proxy_ftp_handler when scanning an FTP 120 greeting for a Retry-After delta-seconds value; the scan loop never advanced secs_str, so it spun forever on any greeting that did not begin with a digit, letting a backend FTP server hang worker processes
CVEs fixed:
Updated packages:
  • httpd-2.2.15-72.el6.tuxcare.els15.x86_64.rpm
    sha:9fd2c144f7aabf3f25765a4bed01ba9098ca2bc7e82ec8735dc9027ed3be0ce8
  • httpd-devel-2.2.15-72.el6.tuxcare.els15.i686.rpm
    sha:012f8b9ac710ff42559ee39e39182806b118964dae78f39ba3f3c9d6a5cf7fcc
  • httpd-devel-2.2.15-72.el6.tuxcare.els15.x86_64.rpm
    sha:22ff3e6d9c4c2b582b68f42883201cc6c6777b6a3769dbea20a34fdc04ddadff
  • httpd-manual-2.2.15-72.el6.tuxcare.els15.noarch.rpm
    sha:8dbd4ad5cd95f7d71625cb77ed7ec7a16ae65813f3f61d2f3e6f2bea70841609
  • httpd-tools-2.2.15-72.el6.tuxcare.els15.x86_64.rpm
    sha:24c4857988819693ef3db5139e0df6a79efdfb2d9babf6c04893b0b4d8593bf6
  • mod_ssl-2.2.15-72.el6.tuxcare.els15.x86_64.rpm
    sha:d5c8263eac1f3f5649e45cdf65a7cac456fe104ab857b1fe40368d4c715301a0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.