Release date:
2026-10-13 10:21:04 UTC
Description:
* SECURITY UPDATE: wrong handler on internal redirect from a CGI program
- debian/patches/CVE-2026-42356.patch: do not propagate the trusted
content-type flag to the target of an internal redirect in
ap_internal_redirect_handler() in modules/http/http_request.c.
- CVE-2026-42356
Updated packages:
-
apache2_2.4.18-2ubuntu3.17+tuxcare.els29_amd64.deb
sha:7bb34e73aff594ae4f42793fb6b64c78ece84e31
-
apache2-bin_2.4.18-2ubuntu3.17+tuxcare.els29_amd64.deb
sha:83f95d17523d2db453ac76f2db04361934c8bab6
-
apache2-data_2.4.18-2ubuntu3.17+tuxcare.els29_all.deb
sha:c0967eaea965105a442001009c10676ef5d872b4
-
apache2-dev_2.4.18-2ubuntu3.17+tuxcare.els29_amd64.deb
sha:c87b75f55271dca45e089e827ba86cd2c6517138
-
apache2-doc_2.4.18-2ubuntu3.17+tuxcare.els29_all.deb
sha:b7e852bccc646109d2ea6bf27fd71cf8cf11015b
-
apache2-suexec-custom_2.4.18-2ubuntu3.17+tuxcare.els29_amd64.deb
sha:d6664572f57d54c9ec53124d002173bff8ead801
-
apache2-suexec-pristine_2.4.18-2ubuntu3.17+tuxcare.els29_amd64.deb
sha:63040edc6dd8dd56a1e9f0df169565e960cd7e20
-
apache2-utils_2.4.18-2ubuntu3.17+tuxcare.els29_amd64.deb
sha:a7869bff64c5d872793556004249d762a92e34fb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
