[CLSA-2026:1791482084] Fix of 7 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-08 23:17:53 UTC
Description:
* SECURITY UPDATE: mod_charset_lite: heap overflow in finish_partial_char - debian/patches/CVE-2026-56153.patch: mod_charset_lite: heap overflow in finish_partial_char - CVE-2026-56153 * SECURITY UPDATE: mod_heartmonitor: NULL pointer dereference on malformed heartbeat - debian/patches/CVE-2026-46729.patch: mod_heartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-46729 * SECURITY UPDATE: mod_rewrite: use-after-free via LA-U lookahead variables - debian/patches/CVE-2026-56154.patch: mod_rewrite: use-after-free via LA-U lookahead variables - CVE-2026-56154 * SECURITY UPDATE: mod_proxy_html: out-of-bounds write in dump_content - debian/patches/CVE-2026-56449.patch: mod_proxy_html: out-of-bounds write in dump_content - CVE-2026-56449 * SECURITY UPDATE: mod_vhost_alias: stack overflow with oversized Host header - debian/patches/CVE-2026-63292.patch: mod_vhost_alias: stack overflow with oversized Host header - CVE-2026-63292 * SECURITY UPDATE: mod_proxy_uwsgi: response smuggling via Transfer-Encoding - debian/patches/CVE-2026-63718.patch: mod_proxy_uwsgi: response smuggling via Transfer-Encoding - CVE-2026-63718 * SECURITY UPDATE: mod_http2: use-after-free via shared session bbtmp re-entrancy - debian/patches/CVE-2026-57941.patch: mod_http2: use-after-free via shared session bbtmp re-entrancy - CVE-2026-57941
CVEs fixed:
Updated packages:
  • apache2_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:cef9abe4f79eb7b1da3b67fabded32b78ff2db3f
  • apache2-bin_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:459d7c1c58b8fbcabdb1b04580431645302cd24f
  • apache2-data_2.4.59-1~deb10u1+tuxcare.els13_all.deb
    sha:8d908918b870e351e427bf7586b9811d7bb3aa48
  • apache2-dev_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:4b5cdd5da811aa223deb5e2e7834662568fc0ebe
  • apache2-doc_2.4.59-1~deb10u1+tuxcare.els13_all.deb
    sha:e500ebdce65b28abe29dcb1ab6b9cbcb0d8fb8d0
  • apache2-ssl-dev_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:8fa7edde08af1cc715095d40a2e0b86eb349ff32
  • apache2-suexec-custom_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:e25430f959b4614ab14498c7310acfca27950285
  • apache2-suexec-pristine_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:985898d9abfadfee710d10087d0d01f364aef044
  • apache2-utils_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:51aa2060fabc5205961e26476a1a8bac856310bd
  • libapache2-mod-md_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:f0914f4d9f33893b6c8908fe3a1fecc11979d605
  • libapache2-mod-proxy-uwsgi_2.4.59-1~deb10u1+tuxcare.els13_amd64.deb
    sha:0d0a6f5c418be62c8a5bca69ab5e4906eadf6825
  • apache2_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:43d7234cade6a976e38fe1bfba8919bdca676e69
  • apache2-bin_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:19d4cad080a203b915c00ec22bfe9bac6b9f74f7
  • apache2-dev_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:d0093f44deaea6f3be7f4c45ecfd1fd2247505a4
  • apache2-ssl-dev_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:c8ae497717e05959bc85f9a1e4904189dad21f42
  • apache2-suexec-custom_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:fb4b2e8d21e67f45dde4bc5249b40b175b5f1898
  • apache2-suexec-pristine_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:32b363aa473b499ccb1ab7a78731c3b839fd08a2
  • apache2-utils_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:e363a5f27416899d41ee370c5f7376715a34379c
  • libapache2-mod-md_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:b761e67a886f8204f38667f8f845dcfe01693223
  • libapache2-mod-proxy-uwsgi_2.4.59-1~deb10u1+tuxcare.els13_arm64.deb
    sha:9490def0284c801e019dcf97cb7dd981ce4be951
  • apache2_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:e40642f7514ec4b0ba9cf95650113998da299d89
  • apache2-bin_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:7a473115a6ba419a980205e84a3fcf2fbf886175
  • apache2-dev_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:05e29eca209ea3e43ea8793ad7a0dd362e3e57f8
  • apache2-ssl-dev_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:f9f7f989e3dc708425825b490e45c9c573d47f1e
  • apache2-suexec-custom_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:3cb95d63c1805902d2c7bc20bfbe891c183cde67
  • apache2-suexec-pristine_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:fa6cd412eb2c66c6465907a909b0d1af1b761ab5
  • apache2-utils_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:8ee78492a2fa2ccdf34198a4eb37a6d345f28e0c
  • libapache2-mod-md_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:ca59987c97a1ceb81ac47786168e5e46408c66fb
  • libapache2-mod-proxy-uwsgi_2.4.59-1~deb10u1+tuxcare.els13_armel.deb
    sha:16675b48fb9819178d9c929edffb2a6ce693af92
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.