[CLSA-2026:1791487799] httpd: Fix of CVE-2026-63292
Type:
security
Severity:
Important
Release date:
2026-10-08 19:30:10 UTC
Description:
- CVE-2026-63292: mod_vhost_alias: stack buffer overflow when a single Host header segment exceeds HUGE_STRING_LEN; reject the expansion
CVEs fixed:
Updated packages:
  • httpd-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:0a719d39a90a9b414014d91d4f66b26fd4fc08636ea26d63929c8a701c7e8ce4
  • httpd-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:1b22a799360f83b3121f084a799c0580cc2f845aee4f3fecfa25c127168c57fa
  • httpd-devel-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:4bfd086274549a56470addb38b1da66fe864bedec81c864878d6ebd48df42c31
  • httpd-devel-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:9a8f1e681a0aa67974fb72cec12425a68c5845c72d846c2ea8654861ef8c58d3
  • httpd-manual-2.2.15-72.el6.tuxcare.els18.noarch.rpm
    sha:bfc305ff6eabc5cd36ddf5155858ccc8ebf18b4e759ceaba0656df162010a35c
  • httpd-tools-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:e77e249b7de9c8c59246c4f4deb8853624c57e62bdbfb4764dc868e89e786e36
  • httpd-tools-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:d85126cb97e15792b19f4fc9426f4e87e4d514f43715c9396c70bedd7ca22126
  • mod_ssl-2.2.15-72.el6.tuxcare.els18.i686.rpm
    sha:7fbca1c81143280ce5c7591ad1986b49117c78b471377c1265e72ad7c6d95759
  • mod_ssl-2.2.15-72.el6.tuxcare.els18.x86_64.rpm
    sha:a82d4bcf76edb8c338536173af63548648b6e7c72b5df1d539f76a7020027f3d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.