Release date:
2026-10-09 13:26:30 UTC
Description:
* SECURITY UPDATE: NULL pointer dereference in mod_heartmonitor
- debian/patches/CVE-2026-46729.patch: reject a heartbeat POST body
that lacks the busy or ready parameter with HTTP 400 instead of
passing a NULL pointer to atoi() in hm_handler() in
modules/cluster/mod_heartmonitor.c.
- CVE-2026-46729
Updated packages:
-
apache2_2.4.18-2ubuntu3.17+tuxcare.els27_amd64.deb
sha:a634d01806cddad84ba3cb67ba833c2f2166b3ec
-
apache2-bin_2.4.18-2ubuntu3.17+tuxcare.els27_amd64.deb
sha:e2af06a977e36970544eca145ffab6fe68dda252
-
apache2-data_2.4.18-2ubuntu3.17+tuxcare.els27_all.deb
sha:46c569a1075684ff1f61adc339566317f28eb2f0
-
apache2-dev_2.4.18-2ubuntu3.17+tuxcare.els27_amd64.deb
sha:0a0c880424b5617cc4297b9e251e628a4927e541
-
apache2-doc_2.4.18-2ubuntu3.17+tuxcare.els27_all.deb
sha:a4207d6841d29dbd6723bfad9c65d481b280b44a
-
apache2-suexec-custom_2.4.18-2ubuntu3.17+tuxcare.els27_amd64.deb
sha:6758e916e3d60e985547dfdbbed1ed9094bdd7a5
-
apache2-suexec-pristine_2.4.18-2ubuntu3.17+tuxcare.els27_amd64.deb
sha:9f1baddbb5f34f4268ff9bfd5eb0e3908c471ad6
-
apache2-utils_2.4.18-2ubuntu3.17+tuxcare.els27_amd64.deb
sha:ce322c54fa1240d20ab5526697def11eaa57a164
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
