[CLSA-2026:1791392432] Fix CVE(s): CVE-2026-56153
Type:
security
Severity:
Critical
Release date:
2026-10-07 17:00:49 UTC
Description:
* SECURITY UPDATE: heap overflow in mod_charset_lite finish_partial_char() - debian/patches/CVE-2026-56153.patch: stop appending to the 8-byte partial-character buffer once it is full in finish_partial_char() in modules/filters/mod_charset_lite.c. - CVE-2026-56153
CVEs fixed:
Updated packages:
  • apache2_2.4.18-2ubuntu3.17+tuxcare.els25_amd64.deb
    sha:bb15f81654fdf9dc95bffb70ffd1234a241f1da6
  • apache2-bin_2.4.18-2ubuntu3.17+tuxcare.els25_amd64.deb
    sha:6cd701e9b9ccd77591fbf723689b3ed1470114e8
  • apache2-data_2.4.18-2ubuntu3.17+tuxcare.els25_all.deb
    sha:731cc095568777c339bedd9b2bb2d21bd9e3d6f0
  • apache2-dev_2.4.18-2ubuntu3.17+tuxcare.els25_amd64.deb
    sha:a90aa8c18d50e2c1e41c29f2d1c9403c0cfa5779
  • apache2-doc_2.4.18-2ubuntu3.17+tuxcare.els25_all.deb
    sha:9f5ca65f85cd1969be58470f5d82bfbc9d3bf0cf
  • apache2-suexec-custom_2.4.18-2ubuntu3.17+tuxcare.els25_amd64.deb
    sha:997d0f3fa752afb664c8e639355c51f3bda0a59c
  • apache2-suexec-pristine_2.4.18-2ubuntu3.17+tuxcare.els25_amd64.deb
    sha:abbbc6e5465e279772ca3d44bfa513d2cc66274f
  • apache2-utils_2.4.18-2ubuntu3.17+tuxcare.els25_amd64.deb
    sha:2c599c0388d04ee38eb0c3384ddf648170a43039
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.