[CLSA-2026:1791552137] httpd: Fix of CVE-2026-63686
Type:
security
Severity:
Important
Release date:
2026-10-09 13:22:27 UTC
Description:
- CVE-2026-63686: fix mod_xml2enc NULL pointer dereference in xml2enc_ffunc() on a failed or incomplete charset conversion
CVEs fixed:
Updated packages:
  • httpd-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.i686.rpm
    sha:48f0ec4a6bfef67d96c10a2aaae938ab1363c82b3230ea95f136934b40577f1a
  • httpd-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.x86_64.rpm
    sha:ad721654618bc94f5029528ab0ccc12a3c43971aa4452df94790b2bc0d49a856
  • httpd-devel-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.i686.rpm
    sha:55edfc6a9db4473a684b0530b8f0f740144d21197114adea924c29531af0201c
  • httpd-devel-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.x86_64.rpm
    sha:183c0d874b6197d4988c22d09c8e6ea7b2ee8a1bc83ab0675e6d8f80559d8c97
  • httpd-filesystem-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.noarch.rpm
    sha:f195a5e69bbf78ae0c05a3b102626f1945dac43b68b62594b62559eff28c6ddd
  • httpd-manual-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.noarch.rpm
    sha:591398444c8aef341a368e12e01b9dbb8f7f36aa08d211d6e12a0f584f6bf1f5
  • httpd-tools-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.i686.rpm
    sha:cca5acfc8e15cf1d52598ffe291b9657d263d16d01de4ce75268a63a3586f9b2
  • httpd-tools-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.x86_64.rpm
    sha:d8b6b8f199afa2d8fecd478ad66885348d8bb4aaa90f23d345c88d87403ce09f
  • mod_ldap-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.i686.rpm
    sha:4deb199b4c8dcc178fd37731355eeec433be357fc65b5c3074724f691dc0b553
  • mod_ldap-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.x86_64.rpm
    sha:e7a8fe7d433b95993f54ac43656aa8adcf7d92ecbe50afdc7cc24ace38c08d36
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.i686.rpm
    sha:c34075929e3d68d91e91c9fb6a37af720a3f43384048859723a9772be971f55e
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.x86_64.rpm
    sha:23d3896c490a41060172b3e45c47e57e39ab7a90b490decdcc53d53d535518f2
  • mod_session-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.i686.rpm
    sha:98cd87dc4fa7f42fb7f2c2f7a4391dbfa5bd76dfa3009e16210ff94723dbc058
  • mod_session-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.x86_64.rpm
    sha:56daa9505c00e0b0be16c15074f7d14175a9e8ab8bcfa2d80418ae3ef6c8543f
  • mod_ssl-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.i686.rpm
    sha:d8eb3c3f80c78e5b41406979b68e0334f5df794824b9a634d26c244da2795b55
  • mod_ssl-2.4.37-43.module_el8.5.0+2659+eb75e1b0.tuxcare.els23.x86_64.rpm
    sha:659398282786de2962f4a1ec4f89dfcaa90902695b76e7a6a0af3698bb9922bc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.