[CLSA-2026:1791391794] httpd: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-07 16:50:11 UTC
Description:
- CVE-2026-56153: fix mod_charset_lite heap overflow in finish_partial_char() - CVE-2026-46729: fix mod_heartmonitor NULL pointer dereference in the heartbeat handler - CVE-2026-56154: fix mod_rewrite use-after-free via %{LA-U:HTTP:...} lookahead - CVE-2026-56449: fix mod_proxy_html out-of-bounds write in dump_content() - CVE-2026-63292: fix mod_vhost_alias stack-based buffer overflow
Updated packages:
  • httpd-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.i686.rpm
    sha:354e18d23e2963317e99ac101893da0e7cd1069c5eaa34a77aaa24f87cdd99e1
  • httpd-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.x86_64.rpm
    sha:3b0c20f5d76a3a829aef308bb1f55088497b2666177ab33011f8f4e3ede39bd9
  • httpd-devel-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.i686.rpm
    sha:ad6b07560ceda26a244428736e5c68d1f52e495bb3561edcea7044199a44afc2
  • httpd-devel-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.x86_64.rpm
    sha:43917eb30dc57f4a13289c1cc44d01b2c04c679a488c75e44789950c4a4d2e83
  • httpd-filesystem-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.noarch.rpm
    sha:d6db30a46c0de98cae9d8ae95a99ebf5a8395d60ca661786d70c54089fc0f038
  • httpd-manual-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.noarch.rpm
    sha:91860675e5cb3a181a05ccb73abe1b26f71ebc161e48fe3e4f984c903a651a2d
  • httpd-tools-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.i686.rpm
    sha:d9ef289fa5e6fcd7a24ab174a06557fcdf64bbb020d9892ebfcca4980f067a7b
  • httpd-tools-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.x86_64.rpm
    sha:59e970491acb7de0fa020c35f1c4a64cdd64ba1ba4c56286c6a5014f39abbc6b
  • mod_ldap-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.i686.rpm
    sha:13ad94a7d6518a202e1cafd1ab5bd1499d357acfc64dada38a71a8e8271d329e
  • mod_ldap-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.x86_64.rpm
    sha:4ae5adc07df6c28952bac310482f77fe5a35a25630946d050cf7566dfdbd3687
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.i686.rpm
    sha:77ac7899092880990670cff69f01ad22dc1fd317f14e3686c5d51ce0154b73a8
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.x86_64.rpm
    sha:5a413a01cb6a49ac888dca10b21a986b6e6d03b5097c66bad2eb294b681a0956
  • mod_session-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.i686.rpm
    sha:2e7a9948437760fb64c06d7bbc567fed6c615c8237efa07fb9f253f54ec8fc2a
  • mod_session-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.x86_64.rpm
    sha:673726e326bcd627bf9a207a4879a2b2eedb214b41d15815db65e345664ef596
  • mod_ssl-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.i686.rpm
    sha:49438a25aaa694417bfdeed301f05d0a4828b67d45a49bc9a8d6238cab20f805
  • mod_ssl-2.4.37-43.module_el8.5.0+2636+fb894a8d.tuxcare.els21.x86_64.rpm
    sha:d4351c6338576eacca02b52c8087ec80304f465c78072306c3487ea5f7024532
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.