[CLSA-2026:1791552547] Fix CVE(s): CVE-2026-46729
Type:
security
Severity:
Important
Release date:
2026-10-09 13:29:17 UTC
Description:
* SECURITY UPDATE: NULL pointer dereference in mod_heartmonitor - debian/patches/CVE-2026-46729.patch: reject heartbeat POSTs that lack the busy or ready parameter or exceed the maximum message length, and parse port, busy and ready with strtol() validation in hm_handler() in modules/cluster/mod_heartmonitor.c. - CVE-2026-46729
CVEs fixed:
Updated packages:
  • apache2_2.4.29-1ubuntu4.27+tuxcare.els17_amd64.deb
    sha:68ce89bced188cd2047d312bc1110fb054e41ccc
  • apache2-bin_2.4.29-1ubuntu4.27+tuxcare.els17_amd64.deb
    sha:492f8614ce96c03da65e40298e976aaed1fb8291
  • apache2-data_2.4.29-1ubuntu4.27+tuxcare.els17_all.deb
    sha:d0b737b347cac20a6403a65e59d3bc631afc606f
  • apache2-dev_2.4.29-1ubuntu4.27+tuxcare.els17_amd64.deb
    sha:3b52f50874c07ba24e63cdb75d9af5adceec603e
  • apache2-doc_2.4.29-1ubuntu4.27+tuxcare.els17_all.deb
    sha:4cb124606a2d9e940935b8214167989641fc0198
  • apache2-ssl-dev_2.4.29-1ubuntu4.27+tuxcare.els17_amd64.deb
    sha:a92057cd3d6eb25c00a179ad54d9162fe7561f7b
  • apache2-suexec-custom_2.4.29-1ubuntu4.27+tuxcare.els17_amd64.deb
    sha:e16df69648d6d19094e16bd83632095af77c0b0e
  • apache2-suexec-pristine_2.4.29-1ubuntu4.27+tuxcare.els17_amd64.deb
    sha:f513d4cd5d9bdd7e9dd714751c544d03eabc26e2
  • apache2-utils_2.4.29-1ubuntu4.27+tuxcare.els17_amd64.deb
    sha:1233b987c98ab79fa274e7141503d59413954ffa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.