[CLSA-2026:1791458607] httpd: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-08 11:23:42 UTC
Description:
- CVE-2026-63718: fix mod_proxy_uwsgi response smuggling by dropping hop-by-hop headers from the backend response - CVE-2026-73636: fix mod_auth_digest one-time nonce replay - CVE-2026-73637: fix mod_auth_digest use-after-free of shared client entries on concurrent requests
CVEs fixed:
Updated packages:
  • httpd-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.i686.rpm
    sha:96a2aa02d582e27838c0cd1cfc77e1ed23b72958ea0954628e0d5c1294b7a539
  • httpd-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.x86_64.rpm
    sha:cd77065d2dc5c77a7da6b97bde4da2f287bf58263bd01d401600a5cd120d045a
  • httpd-devel-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.i686.rpm
    sha:4e6da7d9540a6a2bd79ed8cd5eb10ad596b995ebee1c117e69871b36765958f0
  • httpd-devel-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.x86_64.rpm
    sha:f1cda2b7ce0a1dabeaef54b6b74b552ac07bcf5de839e1cbb6a20d73dc793036
  • httpd-filesystem-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.noarch.rpm
    sha:b6e8324f462df1e18ae8cd5c0a855d33a4c0593ddcc2c21b7523c7793e4dc347
  • httpd-manual-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.noarch.rpm
    sha:3db4885af5cc42b6368eb950d36368d626946a83e926ebd1266e4175979a7349
  • httpd-tools-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.i686.rpm
    sha:34a341192fe12d79f16bc59d446b12e39e213adfc715c094cfb15d5159b6dc22
  • httpd-tools-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.x86_64.rpm
    sha:5db64646274767c749aca07e7c77a98500757a4ad3725765a310f6b84b80db14
  • mod_ldap-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.i686.rpm
    sha:42e30e2e0ff701efa7ac57ad6e54ec043bfb8b03083696a20aaba238d0abbe3e
  • mod_ldap-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.x86_64.rpm
    sha:26f0c499fbd24ec06b6a576a22b0a639dd6a418d08a45f67167a73f4b2271d71
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.i686.rpm
    sha:01fd0a35732f753d827f88b985283e31e31071839d2e1afe061d500d18550607
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.x86_64.rpm
    sha:b34e7879db1776367fe355639a613bf072f65fc8aebda0a634bf759c974aac1b
  • mod_session-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.i686.rpm
    sha:1b3f11e078d3d1cea3f092602f41a797b8ff76a70ea046eb449833e8d153dca4
  • mod_session-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.x86_64.rpm
    sha:eafe8a8a4cb7c836e1f4d0186c994f08e65aec80532bd99cd9d5a51811e54fde
  • mod_ssl-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.i686.rpm
    sha:a73b8653fcec5cca09cedb56c1701b0e5fc337d36bc906d74d2d42ee013c52d2
  • mod_ssl-2.4.37-43.module_el8.5.0+2645+4c87878b.tuxcare.els22.x86_64.rpm
    sha:ae7dcf921f63804b6a2554473fa9399f93dd37704a99e979e315fa7dfa76c867
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.