[CLSA-2026:1792398739] httpd: Fix of 10 CVEs
Type:
security
Severity:
None
Release date:
2026-10-19 08:32:26 UTC
Description:
- rebase to 2.4.69-1.amzn2.0.3 - CVE-2026-42356: limited RCE for some internal redirects to non-CGI files in CGI directories - CVE-2026-42528: mod_dav: shared lock overflow - CVE-2026-47360: mod_session: session cookie not removed during internal redirect - CVE-2026-48005: mod_auth_digest: reauthentication attack - CVE-2026-57941: mod_http2: use-after-free via shared session->bbtmp re-entrancy - CVE-2026-58415: mod_dav_fs: property database read access - CVE-2026-59797: mod_ssl: SSLRequire allows .htaccess ap_expr file-function - CVE-2026-63045: mod_proxy_ftp: PASV address handling - CVE-2026-79768: mod_userdir: information disclosure - CVE-2026-93546: mod_dav_fs: namespace overflow - drop the 8 TuxCare CVE backports; 2.4.69 already incorporates them - no TuxCare CVE patches remain - keep openssl 1.0.2 (openssl-devel) for the bundled mod_http2 on i686 and aarch64, as for mod_ssl; AL2's openssl11 is x86_64-only
Updated packages:
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:d3adb1dc6f5938554de9904d03f2a20d71a5738bbc85796d972635afa23acc06
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:2dec4ff2d7e92af201c5bade3d0f240b543eae0f092fcebdbbf941f4713ac386
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:e827e91ab72251701a8d8723850f010a6c52f81965214a3914ca5669c3622a77
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:5ddd10489f61cbed2a997898a0a3772c61a7ea289af653f435f463797461b6b6
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:8f76ee3413e30224c9c8c6a7306586cf48175a78d1f24f78a26c3129fd47a5b6
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:52aa35b5dceb26a7f0e1b369b5a5b05c983bea38ba5ba16d69d5cff7e18167b8
  • httpd-filesystem-2.4.69-1.amzn2.0.3.tuxcare.els1.noarch.rpm
    sha:4c71bed367f3a966bca7b20614bbca2b284a2c420038ac3b3f2c1b8ca4c5ff6c
  • httpd-manual-2.4.69-1.amzn2.0.3.tuxcare.els1.noarch.rpm
    sha:df9f2e84efb1fc67150c923aa5bfb9814dc3beb8317850c6d94a856de5ba5235
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:f46558d63a4c4e04823c4ea09cec0b0fb4a8e596807d187053361519f5ada367
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:c9224ea9eec02788b5015909a904b6ebc5acc2653a58de7b4ae2f5d89c233949
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:1a83d9dbc9036148e65915b17227ec89a6c0aff7fb0a1d79952ca12adc43135a
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:d2de455a9e16fec7f249be233f9a25479f1d9af0ac58bcb8ae9cf479e25ef9d4
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:d79b8a81dc37d8fcb67cb464f9e023ef4c06922c2a9be409d1f5ad756ae27efb
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:9d347b7f598c8041597444f1c922418a15b2561b8a177aaca4a7c949a27aeb47
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:d111afdaddadfd3776e3f491d28d5a7d358e11ac13ea37fa55840d2191d8fc85
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:9ae4cb169cb5cabda40737e88fb790ca82072d0a32e865a9514075ba33475b42
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:9375b4c425ab15bc503ce0b890e7795d83f9851a17cb742dc2af3a303b72a062
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:b6ca167d55f6326caec2f3e2d2ba27742a106adcd8846ebc73712d9db6896832
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:3bf1d7f426b5536ea3d50e90b44ec8cf57bbd7fc4790c287daed8d2bdb396102
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:ae9cc80cfaf219976c9917ac12016684d1da396194fac883fcc9af6229e0902e
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:f3486794e6b677829a285f7b62fab81d5ecb11b0e3dae368d9d546ca18d84680
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:862e3a7f22a61489cdf2f35669ad21d030920ea167b8bce81795027b9c13ee11
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:666857cb2b523afcc07d48ffc8e8da9b9884461532262d6bc8937965922bb683
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:7ae870c93feda5c841eb0af7ccfba1160d5421c04b501d5cf52641a68902becc
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:bd82c973e048c9c0d33cb5606a1851318b2aa4c4adf45fce4de4199bd9fd51e0
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:a79127e9f148279870b207f45fe90e4dd3223a7b23aea9cd7fb1ba6a5881e5fc
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:038da2f7cca220855da177b0d32f2425956ea683928f64e2f37219f5bd7cc17e
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm
    sha:8c4a6a562612af1d4c1fccf0f6d90e83a29e7fa7e91f4674e3b77519ab728bae
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:998a9cdf417709951e10252252109b70af8c2385ce7f31a610b14127be9c6571
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.