[CLSA-2026:1791323880] httpd: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-08 21:55:55 UTC
Description:
- CVE-2026-56153: mod_charset_lite: heap overflow in finish_partial_char - CVE-2026-46729: mod_heartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-56154: mod_rewrite: use-after-free via LA-U lookahead variables - CVE-2026-63292: mod_vhost_alias: stack overflow with oversized Host header
CVEs fixed:
Updated packages:
  • httpd-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.aarch64.rpm
    sha:37160d1e315647378ac5823b97b1af64b02e05044307316273b9cc604d8daef7
  • httpd-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.i686.rpm
    sha:ccfb096398271c46615cdc92a06420fb61d689995ea27fb76262d8f7547f60ab
  • httpd-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.x86_64.rpm
    sha:f7c1676e86e9b9531665cd8a34b85b47dde384a6bf010382531a67874bc4dac7
  • httpd-devel-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.aarch64.rpm
    sha:a5b2418f0c7c7c4ffed4da9f462d5a322d6fe7313f0ad575a85f495cd78757a5
  • httpd-devel-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.i686.rpm
    sha:cee007859faf5c401e0edc49f9c79e77d72644ea7d7f355916d19f90869b562b
  • httpd-devel-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.x86_64.rpm
    sha:fb150e7d3231ed021af87077cb12d7a0d4e74894418fa496065c9645a1f2ef90
  • httpd-manual-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.noarch.rpm
    sha:92f6ba7ab3e95fe713a017cd17cf6f6fc430b9dd96c6098b426236c1ba0c6736
  • httpd-tools-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.aarch64.rpm
    sha:7f778842f4f08f39c7b5d72dbfbb8e7d05716e1174f9a19bc2022929b4cee926
  • httpd-tools-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.i686.rpm
    sha:9e24c8398e6004fc1acff0dc4d36887f4530bbcd79a6e6e823ae600510f31ff3
  • httpd-tools-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.x86_64.rpm
    sha:9907c8a3136e4cf27ce1fe8ad4fb25dfb5a20459464a81658bf4b2728c7e8139
  • mod_ldap-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.aarch64.rpm
    sha:c39cb3b380c3b43f6cd46059874f6cc46b160c34099c75ce4da8d0c717c22dc5
  • mod_ldap-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.i686.rpm
    sha:0d866ffe23150ec9e16fca1920f120a5143d064eacf6537c7a46d83acb06c20a
  • mod_ldap-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.x86_64.rpm
    sha:f6a0701fa8bd1927cd577171ab2b32a1bbde41da77f6a918afbf085d2a4f20c6
  • mod_proxy_html-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.aarch64.rpm
    sha:861e311de7e9537b55b9858e29d212d0e7d341ebf51556ec263721e5796e6bb2
  • mod_proxy_html-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.i686.rpm
    sha:24b1e5e09e9a8f3e411426811e247ab073c15129b739566d67ff1f5d22800c5d
  • mod_proxy_html-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.x86_64.rpm
    sha:c3c83ad4cef210ff6e282a7cb29d18704a27b5bb0080b7dcdab5bfc0edb25df5
  • mod_session-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.aarch64.rpm
    sha:eec1e555b88e787f9016251261262f9434aa2323cd4c8ad425a663ddcb2785a0
  • mod_session-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.i686.rpm
    sha:36417a089b30aac0e7b30b6d1c82bbafe40bab37281650cfb5340604c3c34a8d
  • mod_session-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.x86_64.rpm
    sha:3f768cb9030eb004139738b80bd8dcac9bd0bc7e299688c58147a5ed66475d75
  • mod_ssl-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.aarch64.rpm
    sha:7339bccc63d8521cea72f0679f2963af5ff9f9ddf1c6bef2dcc893a2a161461d
  • mod_ssl-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.i686.rpm
    sha:00f2831c64cb20fe3030b7acf967a0df8e814b82d60747068bcef55641881600
  • mod_ssl-2.4.6-99.0.9.el7.centos.1.tuxcare.els2.x86_64.rpm
    sha:9a1b75bdc8e76dc1362a7e247b992b0116804dc55fd69de8b417738d39cf6c11
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.