[CLSA-2026:1791881377] httpd: Fix of CVE-2026-42356
Type:
security
Severity:
Moderate
Release date:
2026-10-13 08:49:48 UTC
Description:
- CVE-2026-42356: do not propagate the trusted content-type flag to the target of an internal redirect from a CGI, so it is not run with the wrong handler
CVEs fixed:
Updated packages:
  • httpd-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.i686.rpm
    sha:24722f5a19dc7525cf9dc22270fb765e1d7066ca2c8127272f3c4b8e6729da1c
  • httpd-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.x86_64.rpm
    sha:c038d32c3b3d1f87ed8ee805b72b8923854a3faf7d2915550528d2a57a4be5c1
  • httpd-devel-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.i686.rpm
    sha:233a7c4765826dbe2b546306bc4f309f1e0a809da8a7bb657d46db1a65a58051
  • httpd-devel-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.x86_64.rpm
    sha:3999d3cddb2f0c8673e40e35c1dc2e279dbdd6f52f8c3f677c00204c1e375cc4
  • httpd-filesystem-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.noarch.rpm
    sha:ee6e0f6a862dab91ee3861b198c051488314c4376502526597c9489b95d91736
  • httpd-manual-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.noarch.rpm
    sha:86cb526bb42711b293fc04867998f9f7be9eaef54834ce6e91246cc8b50889be
  • httpd-tools-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.i686.rpm
    sha:3515795505d4938acbd080d09d01f11f34801357be0f5d3a4bb903cbbf602005
  • httpd-tools-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.x86_64.rpm
    sha:0db0b96a37308ca0786da4fef7a3ba23209e21c747b0970a53c57eac58cc4331
  • mod_ldap-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.i686.rpm
    sha:4c9694d2f50bc415066d1cc2a47a39e77fb3e9b57a375dae26ef3e45c45e49c4
  • mod_ldap-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.x86_64.rpm
    sha:01bd48b3d781cbdd8843f638ce02cb7f59f88c6249d7d8f0cfe6b41095d39626
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.i686.rpm
    sha:819f0b60b39b48f2436f3379585bfcef04c062738075c7d9dae1cba707b03937
  • mod_proxy_html-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.x86_64.rpm
    sha:89a29cc4b9372037823946a33a1d9da892864f291dd1201eaa2891c536f5bf19
  • mod_session-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.i686.rpm
    sha:5edc597efa2d48fcca1895523402b84f80053f130e63d85756b1c3e9c269c5db
  • mod_session-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.x86_64.rpm
    sha:5aa6a20d4fbb50fce7ccd4df87b866729b3168d37914f4da106c7d0fef976bfe
  • mod_ssl-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.i686.rpm
    sha:ca5cf02f797604fc89166723fd2cb68adcdbe30e39c0307c2b19a836a24d2160
  • mod_ssl-2.4.37-43.module_el8.5.0+2676+6db669fc.tuxcare.els24.x86_64.rpm
    sha:f5855bc3f86a34c456716e4fd548e9a238f9dfa4523b89876051584d075ac930
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.