[CLSA-2026:1791392983] Fix CVE(s): CVE-2026-56153
Type:
security
Severity:
Critical
Release date:
2026-10-07 17:09:54 UTC
Description:
* SECURITY UPDATE: heap overflow in mod_charset_lite finish_partial_char() - debian/patches/CVE-2026-56153.patch: stop appending to the 8-byte partial-character buffer once it is full in finish_partial_char() in modules/filters/mod_charset_lite.c. - CVE-2026-56153
CVEs fixed:
Updated packages:
  • apache2_2.4.29-1ubuntu4.27+tuxcare.els15_amd64.deb
    sha:bf3e9e1190534e5c5a3cd188e95148d96e1dcea4
  • apache2-bin_2.4.29-1ubuntu4.27+tuxcare.els15_amd64.deb
    sha:31287bc016306c0818d5d0103aad53d980962b02
  • apache2-data_2.4.29-1ubuntu4.27+tuxcare.els15_all.deb
    sha:d406768c2d2cda8ed5f1f9eb1c6b8e9a8b0d0f9c
  • apache2-dev_2.4.29-1ubuntu4.27+tuxcare.els15_amd64.deb
    sha:4894ac9b1dc8175bd94fcf62959bf2c46fe2ac02
  • apache2-doc_2.4.29-1ubuntu4.27+tuxcare.els15_all.deb
    sha:e0c349365fa534c7890516add4c445729c62d2e8
  • apache2-ssl-dev_2.4.29-1ubuntu4.27+tuxcare.els15_amd64.deb
    sha:b06a1979c7c59e9f3a86bfe767383a51a50ce10c
  • apache2-suexec-custom_2.4.29-1ubuntu4.27+tuxcare.els15_amd64.deb
    sha:78df0478b463d5b3cae9739f4ea3a292bbc57b78
  • apache2-suexec-pristine_2.4.29-1ubuntu4.27+tuxcare.els15_amd64.deb
    sha:c902e3a14b51c0c8d5b116adbb43679924cad2d7
  • apache2-utils_2.4.29-1ubuntu4.27+tuxcare.els15_amd64.deb
    sha:3dd580011375cd55c7c47a01ee2a241ae9f604b5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.