[CLSA-2026:1791311011] httpd: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-06 18:23:44 UTC
Description:
- CVE-2026-56153: mod_charset_lite: heap overflow in finish_partial_char - CVE-2026-46729: mod_heartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-56154: mod_rewrite: use-after-free via LA-U lookahead variables - CVE-2026-63292: mod_vhost_alias: stack overflow with oversized Host header
CVEs fixed:
Updated packages:
  • httpd-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:f1207d8d98722fff7a3098a549b0633f3ec4d8f0fb6da4dfcff390be5b5e1397
  • httpd-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:44bba1f809b32070f56b03c683808a3c2f8a396f1b2d32e0eb1065c86e23c162
  • httpd-devel-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:3891db1c7a53a5955a6079e6f8c12a7b22f3ebd7d8c0b6c89ab48f76831d2d68
  • httpd-devel-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:b822c9f525663a9a79808a4bc8a17147060b944fc1a146ba7ee3448e3822707f
  • httpd-manual-2.4.6-99.0.9.el7_9.1.tuxcare.els2.noarch.rpm
    sha:e7378aecda078769ee6bd1fd0b4237668720e105739ebffa9e1fbe022f3fcaa1
  • httpd-tools-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:3889343ad6784655e0684410e7d3d5c43512fa617e0c2004d099d58c4c8ded54
  • httpd-tools-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:a170f855a213eff529a5de2fb466f67eb8cf670cde1d0ab8ae6ca24ef7585fda
  • mod_ldap-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:a6bea0b5835b157d07973aa632a6909cf52ef1f8fe68afda8eb6850e6f746962
  • mod_ldap-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:511e74e886816373e4cea89626b5ca61bf034352210d9a04f42b92ac01e13703
  • mod_proxy_html-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:13c78a28da5706e7a8270522bdd8c1cbdd28fe9e026d6bc10eb641dd872e042f
  • mod_proxy_html-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:3805d05b564365a6d046488be90c3bc558fb352570be797d723c6d7eb8150ee1
  • mod_session-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:d05ae4b4c22c048643bffd6fe4b0ddaace4ded5700709f20101d7962e49f1ea8
  • mod_session-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:264b1418ae7c9d4a10bb1fe138a83bc0a8cf6579d8402f769bc440503c8202cc
  • mod_ssl-2.4.6-99.0.9.el7_9.1.tuxcare.els2.i686.rpm
    sha:d42f2200a0b6181ff4d50080e284a236a611062cae202503c42b99beb53a556e
  • mod_ssl-2.4.6-99.0.9.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:5a337b5f2b7de390bf185cd6e265a3a1279660b0b87962449ec493165832cd69
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.