[CLSA-2026:1792765962] httpd: Fix of CVE-2026-47360
Type:
security
Severity:
Moderate
Release date:
2026-10-23 14:32:53 UTC
Description:
- CVE-2026-47360: mod_session_cookie: remove the session cookie also when the session was loaded under a different SessionCookieRemove setting - mod_session_cookie: as in 2.4.69, with SessionCookieRemove On the session is empty for later loads in the same request, so a SessionMaxAge refresh, a SessionHeader update or a mod_auth_form login can lose session data
CVEs fixed:
Updated packages:
  • httpd-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:0cafeeb91afcb1282fa3c8f6a738d7242222f73e63beab49ca6a331fe3d94417
  • httpd-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:48fbe56ec0747e54111cf5859c56450413e703569761fb9bf5802565b91cd5e1
  • httpd-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:0acb24c2fd519f0adaa6293dd34a624eaf6f6cd5627aade1f0f66f3903496987
  • httpd-core-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:27207d7391617130658aa03b6ad6fc0f1005337768f8246d57c20fcbf3797dd8
  • httpd-core-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:f92fd56eb56529bb31160eabe4fd6596d1ad304f7b9351742206cd3f1908cb8c
  • httpd-core-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:d6eb3c309933d510c8381fbf2476d5506c7047170301626d2e36d59bd410a4b6
  • httpd-devel-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:86481a2012c1651163a4921fee5f2bd55a644412ec44f23b67e288e37cf875fd
  • httpd-devel-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:dc8477dc953f6b8fafc05b7b60b81ade6a1ffb6aa501e108bb405ee253eb3134
  • httpd-devel-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:c28c2ce1367931b761aafe03916388d677c5318b702497cd996b343164361b6c
  • httpd-filesystem-2.4.62-4.el9_6.4.tuxcare.els16.noarch.rpm
    sha:dd00981b5fb3a8445efbc3b75314250e47c0204ea81fb205aed9e70d7a74d772
  • httpd-manual-2.4.62-4.el9_6.4.tuxcare.els16.noarch.rpm
    sha:cbcd57ab7358db6688d3f93ae381c98fd9115ecccf9ec01cc0b867fcfbed6b04
  • httpd-tools-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:64f9c9b5cbc9800b6190824ca1f5f77b008d02b9937fd58462396daf9a516a6a
  • httpd-tools-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:7f158e035114d41c568c6835fa48dd33d684552c4d5ac9c8f2ea5960ac3efd97
  • httpd-tools-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:42a27b59574236e18b2cecc9bd3dcdb3e99fe4d89bbb84311254b011096ea23b
  • mod_ldap-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:348c192d4ea6e6afa74cf73f15ba4230308ba541cbd65faf2f8164c386154694
  • mod_ldap-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:0350146774ebc7bde20bcd6406f37a3aa6e91d5fb98aa7ac8d1f30be4e240080
  • mod_ldap-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:1c7981d1e3d59a80d4dd34907ab8295f54c9bd59fb484d90405dbb4ebc3e7c42
  • mod_lua-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:860fd3d16cb4818051e61e1ac646ed6454675407b1a1ad3f009a4f942ad892c0
  • mod_lua-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:955837924ec397b9811f42529d2f9705c8cdcca145b1bd614d8deabae96e4f21
  • mod_lua-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:980dbcd1efcf83da43bad08ae1f6e0483eed1ca81256c0f93786203bd2a825a9
  • mod_proxy_html-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:7522e7b5fe71de4d8d4e510e549b3b757f2425b0da7e21f6c15d3a9831073ae6
  • mod_proxy_html-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:38c980ae06bc8eb1eec39b3eef86716b7c3e82c910b046055fa68277fd104d89
  • mod_proxy_html-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:61b053ebc161a37f4b370fe8ba4cc2874e1f88d4edd2b849d93b83b629243fd8
  • mod_session-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:287bb14c5bf5d1f728a92b9252c350ef6f6ef238b9eeb097af9feea4813caf1e
  • mod_session-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:3e2ee393951418d46319444fddceaa5224ab0fb2a1282d4997b3beace84b163b
  • mod_session-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:133cd0e2d7228b027076dfa286ab9441abd6a535396903e5220ce9111f4a650a
  • mod_ssl-2.4.62-4.el9_6.4.tuxcare.els16.aarch64.rpm
    sha:7fa4e76aaa32aecf9e919a4b694cfe609bce6c842c68710872449e8a3d1fb06c
  • mod_ssl-2.4.62-4.el9_6.4.tuxcare.els16.i686.rpm
    sha:54b56f3b2244990bbaad1c8a668db3baeb6d1a6ad2d6740ec8c5f2b2cbf41e58
  • mod_ssl-2.4.62-4.el9_6.4.tuxcare.els16.x86_64.rpm
    sha:70d0075c78f85d68adbc11eb13b5795a540461e5c2c59a1782ff996030c7fef8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.