Release date:
2026-10-09 15:01:43 UTC
Description:
- CVE-2026-56154: mod_rewrite: use-after-free of the Vary header name
collected during an LA-U/LA-F lookahead of an HTTP header; copy it into
the main request pool before destroying the sub-request
Updated packages:
-
httpd-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:e554d99b485f5bca502f28ce85aaf3e7ef0b1818dcd0b529f192828e42549e96
-
httpd-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:33325c96b0495e3b2ca72ead53b31e4d7bd1f83285e9b864ac99d4882fc53ced
-
httpd-devel-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:74de495b46aae8cccc6050639c2758d5d1ffb3d393ccec242388a58ce9b3d9cd
-
httpd-devel-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:f209985187b949b4e58377516de90b6e6837996a5828f6a6dd5159f106f7ab86
-
httpd-manual-2.2.15-72.el6.tuxcare.els17.noarch.rpm
sha:38527ed1898711ccf27f06100e3c68cec306058b3dd44ba3ef2c3f06f64f92f0
-
httpd-tools-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:9d7f4c2e471854cf47100f227e74d990d37258c44f288aaab5e46095c11bc321
-
httpd-tools-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:3eebc84f7f222167165b23dc51dc50c989de7ec4fd14fa4a70ce8ecaab8c4ad2
-
mod_ssl-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:1fd6e5a0e22f1cbd560d2e9bf6e711f46a83d9c1bd1d72c1517046ad396f1fe7
-
mod_ssl-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:7b80d20fd809de003a6561a58d04ba00543d6f2439561c802c44392721b7e3e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
