[CLSA-2026:1791292931] httpd: Fix of CVE-2026-56153
Type:
security
Severity:
Critical
Release date:
2026-10-06 13:22:20 UTC
Description:
- CVE-2026-56153: mod_charset_lite: out-of-bounds write in finish_partial_char() when a partial multibyte character straddles buckets; stop filling ctx->buf once it is full
CVEs fixed:
Updated packages:
  • httpd-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:74a663304ec522a2085a7abf0ec3997710e32114725871917e823b0fe9852025
  • httpd-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:c384180afbab9c3b95c932f452078f2ab44682e0a5496fe8271ac0a57d312ca8
  • httpd-devel-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:3d7fc18e8c9f8f923374a4dda5b8d8c7be94c86d8eba737693022eb16d52a45c
  • httpd-devel-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:1305e4b57a2c37d03b8728755f3853d2986e44742125ea300fddfb196273039f
  • httpd-manual-2.2.15-72.el6.tuxcare.els16.noarch.rpm
    sha:c670f2009eaa417c02a86a6665893dd4d9e320fae155946f8c5b1bd49b81ed58
  • httpd-tools-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:dfd9cce1b7a9e44e90d2e69b7c94547644fb2b1b906ea68a76c322e927f2f6ea
  • httpd-tools-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:546277908f306251f551edd2e9595bdec7a66d3ab8e1d6f317d090423006d6a6
  • mod_ssl-2.2.15-72.el6.tuxcare.els16.i686.rpm
    sha:b987c88d02b1f2db1b05dbd0d03fc7fe273b8864afbcb3cb4f9924caa1a12e45
  • mod_ssl-2.2.15-72.el6.tuxcare.els16.x86_64.rpm
    sha:458ea8c02469d8b9c445d030d9aff15b407e345bc9fd4fd76bdb948ba3f521a2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.