[CLSA-2026:1791488274] httpd: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-08 22:28:12 UTC
Description:
- CVE-2026-56153: mod_charset_lite: heap overflow in finish_partial_char - CVE-2026-46729: mod_heartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-56154: mod_rewrite: use-after-free via LA-U lookahead variables - CVE-2026-63292: mod_vhost_alias: stack overflow with oversized Host header
CVEs fixed:
Updated packages:
  • httpd-2.4.6-99.el7_9.1.tuxcare.els16.i686.rpm
    sha:09be71f590988d77f32e9b93888015161ad494049dadbeade49b9439b32c41fe
  • httpd-2.4.6-99.el7_9.1.tuxcare.els16.x86_64.rpm
    sha:93958753287037d3787bf2434e2259e6d7a9a3b8907d38c9e81af217c0c9b7b9
  • httpd-devel-2.4.6-99.el7_9.1.tuxcare.els16.i686.rpm
    sha:664bea0169c36e702fb7a4b6de180e3cfb3dc45a3d22d0eb613ad0e81b822fbb
  • httpd-devel-2.4.6-99.el7_9.1.tuxcare.els16.x86_64.rpm
    sha:9c6b4a596ff49ab14aef2b115bea953aa186d1e27807fbbf7c8d19a719a4d1ad
  • httpd-manual-2.4.6-99.el7_9.1.tuxcare.els16.noarch.rpm
    sha:435536a46a27330a78c3a251d084092622c7b5dcbe447966567165e9a57802e5
  • httpd-tools-2.4.6-99.el7_9.1.tuxcare.els16.i686.rpm
    sha:f7617e5fcd7c40871b5668414f7e71aacb2e4fa80ce0cdb8ba1cd7b867a3d80f
  • httpd-tools-2.4.6-99.el7_9.1.tuxcare.els16.x86_64.rpm
    sha:c4b81b5d99506b9e361bfd1e261bda1072fd6010be675cc3578d4a216ad63c86
  • mod_ldap-2.4.6-99.el7_9.1.tuxcare.els16.i686.rpm
    sha:38b942efe28b680b22304d3b50ca73c01336f2eaf687a458c8e32e6af4faaa93
  • mod_ldap-2.4.6-99.el7_9.1.tuxcare.els16.x86_64.rpm
    sha:47332fdf5a7bacabc6c3325959c8d738d086eac6efdfd569433f63f3f5b9c9bc
  • mod_proxy_html-2.4.6-99.el7_9.1.tuxcare.els16.i686.rpm
    sha:c565f441278018b809eb297024219a71ba8930686c5de7c3bc81eb5196fb235e
  • mod_proxy_html-2.4.6-99.el7_9.1.tuxcare.els16.x86_64.rpm
    sha:8a7fe60eab5faf9b91d46231265bdec1a46b61e52b957d2fdeee750dec455147
  • mod_session-2.4.6-99.el7_9.1.tuxcare.els16.i686.rpm
    sha:62d3109998ef90a12b7b91aff0514f74f912f339b4c3578348e4698b8641601a
  • mod_session-2.4.6-99.el7_9.1.tuxcare.els16.x86_64.rpm
    sha:f1b93975fdf7ea88454d5b9e7018556fd94861513e4dddf590b2ecca32051f67
  • mod_ssl-2.4.6-99.el7_9.1.tuxcare.els16.i686.rpm
    sha:9adfbe84edd3e7fca351878ae176ca34aa8234ebed21a4a652a2880ca6879ce1
  • mod_ssl-2.4.6-99.el7_9.1.tuxcare.els16.x86_64.rpm
    sha:16daf6a915c25b2a1e26c9fac5a4c7cdb6d29ff43ed77e8d1416dc709d304333
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.