Release date:
2026-10-07 18:05:36 UTC
Description:
- CVE-2026-56154: mod_rewrite: use-after-free of the Vary header name
collected during an LA-U/LA-F lookahead of an HTTP header; copy it into
the main request pool before destroying the sub-request
Updated packages:
-
httpd-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:e9718e6708e242449c4051be55bb4b3745f43965ac5ec1a4c14615ea22ac08d8
-
httpd-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:95b6b8a8725e1ee687f00567b7011691c18113e39189162517569c6de7ed02e1
-
httpd-devel-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:cd434b93d956f58067057f98131677f9e8acdffcbeb535f786b46cddbfc5477b
-
httpd-devel-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:0957660fec9a19aa25158e03d7ce3666b6b1258a672f083bcd58b2de356acc98
-
httpd-manual-2.2.15-72.el6.tuxcare.els17.noarch.rpm
sha:575c3b02de0be956d102ab50b344b8f312295f358f144a3ad719a79b72b83c9a
-
httpd-tools-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:d7130905d563e067738f4900fd66969621f9910ce74cf947f1dcda512e211150
-
httpd-tools-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:06e21b619033643a2c32682eefa418b292d7beaeb31d39602b2a7506b2552967
-
mod_ssl-2.2.15-72.el6.tuxcare.els17.i686.rpm
sha:4190f139805d33aaaf622d069ee03fc2c4d26e527ff33197e2c81d3e71285f9d
-
mod_ssl-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
sha:1413286562452867e9389fad7bc91f25c18fea2929f4220ea2325751305e17e8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.