[CLSA-2026:1791396324] httpd: Fix of CVE-2026-56154
Type:
security
Severity:
Important
Release date:
2026-10-07 18:05:36 UTC
Description:
- CVE-2026-56154: mod_rewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request
CVEs fixed:
Updated packages:
  • httpd-2.2.15-72.el6.tuxcare.els17.i686.rpm
    sha:e9718e6708e242449c4051be55bb4b3745f43965ac5ec1a4c14615ea22ac08d8
  • httpd-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
    sha:95b6b8a8725e1ee687f00567b7011691c18113e39189162517569c6de7ed02e1
  • httpd-devel-2.2.15-72.el6.tuxcare.els17.i686.rpm
    sha:cd434b93d956f58067057f98131677f9e8acdffcbeb535f786b46cddbfc5477b
  • httpd-devel-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
    sha:0957660fec9a19aa25158e03d7ce3666b6b1258a672f083bcd58b2de356acc98
  • httpd-manual-2.2.15-72.el6.tuxcare.els17.noarch.rpm
    sha:575c3b02de0be956d102ab50b344b8f312295f358f144a3ad719a79b72b83c9a
  • httpd-tools-2.2.15-72.el6.tuxcare.els17.i686.rpm
    sha:d7130905d563e067738f4900fd66969621f9910ce74cf947f1dcda512e211150
  • httpd-tools-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
    sha:06e21b619033643a2c32682eefa418b292d7beaeb31d39602b2a7506b2552967
  • mod_ssl-2.2.15-72.el6.tuxcare.els17.i686.rpm
    sha:4190f139805d33aaaf622d069ee03fc2c4d26e527ff33197e2c81d3e71285f9d
  • mod_ssl-2.2.15-72.el6.tuxcare.els17.x86_64.rpm
    sha:1413286562452867e9389fad7bc91f25c18fea2929f4220ea2325751305e17e8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.