[CLSA-2026:1791310786] httpd: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-06 18:19:58 UTC
Description:
- CVE-2026-56153: mod_charset_lite: heap overflow in finish_partial_char - CVE-2026-46729: mod_heartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-56154: mod_rewrite: use-after-free via LA-U lookahead variables - CVE-2026-63292: mod_vhost_alias: stack overflow with oversized Host header
CVEs fixed:
Updated packages:
  • httpd-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:1a7f198ac15ba833eeb49ddba11a8bbf3c0a6bb48a76110aca941671a98da400
  • httpd-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:47afbda5c9ece60a122c55bf71ee29446079b789333a0759978b7a7d0539528c
  • httpd-devel-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:f8ae6be778c4c3028f839e7c0aadcdefe88e9a3d376994b8529766e1602eb8e4
  • httpd-devel-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:1650279bc802d5d906b1d4bf429330eb23647f15ded62122eda40bb0dcce469d
  • httpd-manual-2.4.6-99.0.9.el7_9.1.tuxcare.els2.noarch.rpm
    sha:b0fab86d68fbee55ffb529b3dab170cb84340fef99d9ed34c8c753889c5c7b7e
  • httpd-tools-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:331b0de6e4b4cd15e54215a6f3b1bdfc712adf27e2c3a33c82864247a2af6d86
  • httpd-tools-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:23ee3dbd0f22171885ed593e5b066663fe60363765ffddfcfb3f30fb54bc0b4d
  • mod_ldap-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:14ad59a84419a4f4657f61e2f1ad024efd0fdb96a998a2ac5d8b6717b1fe15bf
  • mod_ldap-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:f494b27177c9307b8f6b088ebb09e18d4a5b80cadd95bf0bfc1dc5622ef4aaf7
  • mod_proxy_html-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:5425cb1a46be4d1f4051b8f61a0315de8f2c8cfcfa7d95c5277dc4108a3306a6
  • mod_proxy_html-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:69faa382a7c44c90724c44b8ac662e14ec2b76df29e137952e8c31fdce88be76
  • mod_session-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:f189bcb8624b13a81e661eba25b714fb04fe6eba60831c7e37c7bb1d148dc919
  • mod_session-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:ed95fca9ef4c4b58d005b3a77bdd9b3125e3bdb7211383f8d59d88694a31461f
  • mod_ssl-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:4a08a7ed52ba4358b228a16dde2d7dc2d2621c8c54582677a811595f7e70867a
  • mod_ssl-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:5adc3d06ff430b07b7250043bf53b53e0ed067f32b777e43757446d18c8fdf5a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.