[CLSA-2026:1791552138] httpd: Fix of CVE-2026-63686
Type:
security
Severity:
Important
Release date:
2026-10-09 13:22:27 UTC
Description:
- CVE-2026-63686: fix mod_xml2enc NULL pointer dereference in xml2enc_ffunc() on a failed or incomplete charset conversion
CVEs fixed:
Updated packages:
  • httpd-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.i686.rpm
    sha:403df7600d6f98b34cb79f71c93a22186ea7ff2c97247d1f7de37d06c93832a3
  • httpd-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.x86_64.rpm
    sha:8169df2a14bf51fe4c16c4116614d3cbf1dbae3b40d03d2628668d48651ce91e
  • httpd-devel-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.i686.rpm
    sha:5d127c97aa040265e5069ed97f48d3328e7a8d918c97e2c5a3a40f6cc53ebeeb
  • httpd-devel-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.x86_64.rpm
    sha:325af25936b6a7b9f774d5b43858837cdfc4773cc2cbdaa00c0a1e7bc6202802
  • httpd-filesystem-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.noarch.rpm
    sha:fd3516c2ff6ad31b95dedc72a6608aa2e93dd13aeb0acc3eb0fee7dd42fcf1b5
  • httpd-manual-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.noarch.rpm
    sha:685f61ca649d69ed856773e3b83b9937ccd7452bd9377a71598af855d7638a4c
  • httpd-tools-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.i686.rpm
    sha:2f345207b56c631c9d817047c5d7a0b15a9fd01d9e9628a42273c0028186fe1c
  • httpd-tools-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.x86_64.rpm
    sha:ea19a4e3d4646104645b8009717fafc25c536635d18f723263491075bd3911f8
  • mod_ldap-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.i686.rpm
    sha:205837dd56dd0b92dd1bbd5396c3c2792c2fe021bf7ad12cc4b3ace63095b885
  • mod_ldap-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.x86_64.rpm
    sha:5b85c19ed900c25a496ff89004853cba9ad1bdc99632e65085b3588171ef059c
  • mod_proxy_html-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.i686.rpm
    sha:66805aee0b76c7028c06079f371141a2f0b03cfe4f49ad6cc51148ae75732a8f
  • mod_proxy_html-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.x86_64.rpm
    sha:f0dcddd53dd914e90ff4065c99692c8ad76bdf4b37ba00442b72e7d227bcc8f8
  • mod_session-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.i686.rpm
    sha:211b757c3c4397df3c4864316bfad74e0d854098850c0aae7248b4c74eb319b9
  • mod_session-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.x86_64.rpm
    sha:586f346f1cba483b9fb92c7c5f92f996059b1398478eed79f57c5b650315b79e
  • mod_ssl-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.i686.rpm
    sha:0ff7efdc1d6c341f2cf06115c29be6bcb0bd1ae19e4749f524baa9d6fc0885fb
  • mod_ssl-2.4.37-39.module_el8.4.0+2660+3d8cb4fd.1.tuxcare.els24.x86_64.rpm
    sha:d98444930a16bf5c3fad93a96a0f568d9222cf8be0734e26bc72e1a0dbea84c9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.