[CLSA-2026:1791487835] httpd: Fix of CVE-2026-63292
Type:
security
Severity:
Important
Release date:
2026-10-09 18:04:16 UTC
Description:
- CVE-2026-63292: mod_vhost_alias: stack buffer overflow when a single Host header segment exceeds HUGE_STRING_LEN; reject the expansion
CVEs fixed:
Updated packages:
  • httpd-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:9b65163596d5c839a7e46b8c943729630c6398baddd7ef15f9e5cd26d3adbb81
  • httpd-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:0d0f763204fd5ea362b22276cde899a0d9a67b15e7211cbaf4b14d0c7489f0a2
  • httpd-devel-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:0a8999f02f04771a23edb895a87696732a4b0bd7f7bfcf15ddf2b7e3cf836f71
  • httpd-devel-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:746932e484137788deee91b993cfbc05de756044ac309812459333de4f2aecf8
  • httpd-manual-2.2.15-72.el6.tuxcare.els18.noarch.rpm
    sha:02e4ad90021ba822862973f21c06a2d2904c7fcea8dae3abaa834e08f47a8042
  • httpd-tools-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:4666b89cb7386fc0e7699f62bea027e3b95a3794a9f07419b817563c9333e3f9
  • httpd-tools-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:74255cfd542f1ac36da962b6fc80a2b7d1b5a891a9075024d148c5624a43d075
  • mod_ssl-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:fa70a8de3b60856b4ba99ee8592e45f0408acc77a880efb4f28587249baf6bfd
  • mod_ssl-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:d63f75071295e8e5bec6e56a12e224c890e7cb21db71148ee2ef45253f5f568e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.