[CLSA-2026:1791471297] httpd: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-09 07:31:55 UTC
Description:
- CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char - CVE-2026-46729: mod_heartmonitor: validate the heartbeat POST body and query - CVE-2026-56154: mod_rewrite: copy the lookahead Vary value out of the subrequest pool - CVE-2026-56449: mod_proxy_html: don't dump content when printing a comment - CVE-2026-63292: mod_vhost_alias: reject host name parts that do not fit the path buffer
CVEs fixed:
Updated packages:
  • httpd-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:1a5f671da82fb6169a3843bf6077b1a3c77f29b90eca902f25015dfc6af0d123
  • httpd-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:cc3223a17ba7f2e09b51c1ccb8d2e353c6812353387b63af839607175efe5bf0
  • httpd-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:a996036559b7cd7da20b75800692be4b6c2421f8ded2e29c6cdc529d18fa453e
  • httpd-core-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:bfd1b60d5794c6024c4f3f0773d17e0d12961e28d56634af8a9361269a093345
  • httpd-core-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:3f53e13c8093602056a6acb816feae6390f94491d451fff8c59606a9c8be8952
  • httpd-core-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:35c0570ae6259520ec01499f79d57648256b72a3e9e237a9ffad26cd5ea6a1e4
  • httpd-devel-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:d18a72f3ac06491b5ef6b5aaeaf505bab4b0045a5998ab9492ed83d274f6c5b9
  • httpd-devel-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:9d7cd5de5695db61e178a8d9bfdcc71a4fdd307ccde665724aeb6c97f18be93f
  • httpd-devel-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:94dea818e9eebbb4ddbb8d9be2f052a6295366a28ee031a7f8c9b5bdd14702d2
  • httpd-filesystem-2.4.62-4.el9_6.4.tuxcare.els12.noarch.rpm
    sha:0bb6b1b8c9f35cb693483959169210bdddedfa7435e582ef7729865cfc0d1d00
  • httpd-manual-2.4.62-4.el9_6.4.tuxcare.els12.noarch.rpm
    sha:afeeda66296859cea0f27c2e474e22d6795effa53fbf34eb77d627f985b8491f
  • httpd-tools-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:6f0e0a0b31f7e1ecf4c2c10c45028228dd288f0c89530fbac5ddf45dabaf9737
  • httpd-tools-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:0f181b35ad688652c9c77587ef8560d2b6165b7f566bb9b4b39e1921d5c1101f
  • httpd-tools-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:128a9fd426b488ac1211cceb444634c08ecd395cb5c5a98d0b7c99912441aaa6
  • mod_ldap-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:b7b0950ed80f8c25839f5ebd97db91ea7b56d1012bffd82f3b9eadfd86901b61
  • mod_ldap-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:1947e9e119f61df20eeaabac7bddfebdc0e3af7096486899a6a6652727312540
  • mod_ldap-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:3e352aebf2700514d2840ffd23976b938095c237418fc5fa4325bbbcfd0463b7
  • mod_lua-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:f150c5a608671024309e7a874e5c998a17bd0b67adf965868726029f3b37715d
  • mod_lua-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:e3046dcda911f359d3cca1236b970878a464e1b6c94ba5fd8c3dee56129f40a9
  • mod_lua-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:1e02ccb4ec66c95334c0dd5ba4f7e0a6a00c878aedefaad62cde3f736df8fd89
  • mod_proxy_html-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:c5d5dd89443146c0951484e8eba71d89a44570994c871d7f6d0e97a5bb9e4b38
  • mod_proxy_html-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:ff1e8e6be88846f0d1b2e4c535b6c565be96a17304e940c28f30f7623e6d8234
  • mod_proxy_html-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:2cf1e57474f63b4aa10382dae2830c133f3f4471eb8543565af47449753b4568
  • mod_session-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:51accfe5808e286bfdf095923eb0f322d418109039a7d290dbb032814c59ff77
  • mod_session-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:26abac58e25eb3a50e772421c17c213dbf2a54f865b490157439dcc870b03dc7
  • mod_session-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:79b12e4e98204f70a09f9e330be55b437a66a75177269d0c2db0f61f41656eb8
  • mod_ssl-2.4.62-4.el9_6.4.tuxcare.els12.aarch64.rpm
    sha:2eda57383e0f679788124e3f31a47cb3c0e2e44eae5fcd61737dc81e223bd2d8
  • mod_ssl-2.4.62-4.el9_6.4.tuxcare.els12.i686.rpm
    sha:c4e69991999508fb05d318a8cae6f61737214bb4fa1e7e8fd9caa01c3b398ea0
  • mod_ssl-2.4.62-4.el9_6.4.tuxcare.els12.x86_64.rpm
    sha:7eefc406aa40f0ff4c4e542b878786a3a24619fa7203e9b902bf7e6235c110e4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.