[CLSA-2026:1791293022] httpd: Fix of CVE-2026-56153
Type:
security
Severity:
Critical
Release date:
2026-10-07 00:32:59 UTC
Description:
- CVE-2026-56153: mod_charset_lite: out-of-bounds write in finish_partial_char() when a partial multibyte character straddles buckets; stop filling ctx->buf once it is full
CVEs fixed:
Updated packages:
  • httpd-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:0a01217796fbde045252814719a5d46ca05c32d089690f3338d4a9f885d2b40e
  • httpd-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:00dd378f1650d0ac09d0ad057a6dca42f48e1d039789b953321ee94239471e6b
  • httpd-devel-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:cd69c5654a4cd101daf93b943358caea92a90f471f786348649923bd96189595
  • httpd-devel-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:ceeb6e6f21073be15476bb1defdba74ec878a0eb5b89cf883a5a5e64715ac545
  • httpd-manual-2.2.15-72.el6.tuxcare.els16.noarch.rpm
    sha:6e9bea501eb729be2d99181d0ba5105c28308966270cc9a922ef6850f1173be0
  • httpd-tools-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:ccf56af6897da9d51b5421f254d53e59153436293494862964cba87877d7b0f0
  • httpd-tools-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:af60ca2e3a298d926b3d6e7bb705d2355f6521074c69ebab6a9b30bbf646ec78
  • mod_ssl-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:6ff4af87e77cbad6893365d845f63a088b5d534e424fc9657e4ff7523923582a
  • mod_ssl-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:3dcb2bf1be82e41221626496b61dd6aeace236bce93c5485d98f22bbde19f842
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.