[CLSA-2026:1791392163] httpd: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-07 16:56:19 UTC
Description:
- CVE-2026-56153: fix mod_charset_lite heap overflow in finish_partial_char - CVE-2026-46729: fix mod_heartmonitor NULL pointer dereference in the unicast listener - CVE-2026-56154: fix mod_rewrite use-after-free via LA-U/LA-F lookahead of HTTP headers - CVE-2026-56449: fix mod_proxy_html crash in dump_content - CVE-2026-63292: fix mod_vhost_alias stack buffer overflow with long host names
Updated packages:
  • httpd-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.i686.rpm
    sha:cd315a2e90d54182d86154359616c0e23e26ee5d55f8ed00853fabbe2c59aaeb
  • httpd-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.x86_64.rpm
    sha:8099391361d74507ab0e4ba9adcc093f2faa29739fbb35eeb09f1e6b22b51501
  • httpd-devel-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.i686.rpm
    sha:5192ec729f2c4438033526c0e8b4992a9b1a607e5161c1ebff4c2855fbf1e79f
  • httpd-devel-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.x86_64.rpm
    sha:92e330ca3e08c5f9596e6ff3ebf389078a0c746a27b56778b4ad83bf9384dae9
  • httpd-filesystem-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.noarch.rpm
    sha:c765e35acf8a26c146a2a8432010db3d7df55270a43efeb486008445c7ccb4a6
  • httpd-manual-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.noarch.rpm
    sha:6df3a75cd68294340f9771ea0ededb892ab6a57e3713e2b0e48b2a306ab9aa52
  • httpd-tools-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.i686.rpm
    sha:775891917b579de637a5e4e190c4711bea1a73977a5cf2dfa1777cfa09cc2d01
  • httpd-tools-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.x86_64.rpm
    sha:a4856de0c94075ee71ba51a33280420efbf9ee5a9a2c0f0030304e8be1d38202
  • mod_ldap-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.i686.rpm
    sha:01cc8075374a57b7129baa4e0e1b5ee0430d2f9ae85b3828cc0c5e856b4c784b
  • mod_ldap-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.x86_64.rpm
    sha:6ad4caec2d8e6257787ed9606b655903e4e13e2249541a35d4bb96804dbfc02a
  • mod_proxy_html-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.i686.rpm
    sha:3697c6adca2e718c9cfabfe86e0ffae5901a0bf53237a9a40761098addc1aaa5
  • mod_proxy_html-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.x86_64.rpm
    sha:d12bc1f265ca203ab5f0bce170a967a36fa675b7c5793b74cf0d78416ce881f5
  • mod_session-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.i686.rpm
    sha:85bb24aa1242a970757237b5a4fbc263c3f75cdf0f9a24783d54e4209e4eb948
  • mod_session-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.x86_64.rpm
    sha:654a22d2f279e0204e0c224b89191867f1e09d1201667854046ad47cc43d40c9
  • mod_ssl-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.i686.rpm
    sha:1299541920f80135489a55fade04026d63ac1ce6f8466345741f426f6970446f
  • mod_ssl-2.4.37-39.module_el8.4.0+2638+bc4fa003.1.tuxcare.els22.x86_64.rpm
    sha:102548f96b5b2ac62d19223c55925829ef4444af32e367a5c0c1902098ef62eb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.