[CLSA-2026:1791462149] httpd: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-09 06:45:26 UTC
Description:
- CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char() - CVE-2026-46729: mod_heartmonitor: validate the heartbeat request body and query - CVE-2026-56154: mod_rewrite: copy the lookahead Vary value out of the subrequest pool - CVE-2026-63292: mod_vhost_alias: reject host name segments that overflow the interpolation buffer - CVE-2026-63718: mod_proxy_uwsgi: drop hop-by-hop headers from backend responses
CVEs fixed:
Updated packages:
  • httpd-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:0fe0e402c8cc0eebbfff44a5c034377573431530ee81f796d710f1ef0914db6b
  • httpd-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:df3d6462669364ccc104c51f04569c251d8abff7c74dcad9776f3e9844f559d9
  • httpd-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:050de47877edfb02f10f88ae514608c5ec96805fbe8b6347fccf73b0812464df
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:7c7fddeba29aed89719884fae18a16389151366cfff9e062543866027b436d15
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:379693820ec4ef7a49b481c6e92807be5cc43ec0eadeda633fbbab032b31a547
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:733c26b4a12a60b950b7a6d1a396eda6f865f84783f8fd7bd43f6488816673e3
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:2cf3a7d6b466c9d6d648ec273a00cce0a360d3df370c7411ba4c2f09f8b8f66c
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:4806947484cdca8b8def4867d422321c9c7ec258d76b7440ab4c7d62ed034a53
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:6f7c8d0db0a794c36ceced9dceb8ac7778e9f0e1118c817c87c3da2a2bac5017
  • httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els1.noarch.rpm
    sha:d2677a8c0a54585e9c3759247190bee1baded4d107666980c8d95f83da44b8fe
  • httpd-manual-2.4.62-13.el9_8.6.tuxcare.els1.noarch.rpm
    sha:ca5995a938c63a9ee6b1a6c0db69ad71c2811af246f822c707de29bbb8b9e66f
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:4a08d1f56960994b6b2a934b48a0c1a6a629372a395391bd3d9447b429541620
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:1347c9e809a348465b9be714e5997180fa3f21cbfde8ce22332062e03388bf3a
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:d071fec682bde3a1f36e042392a94e3e80f8a1d6429523c33cc3e0189da86fcb
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:d686262552442aad3d41decb567f893547c8eb8e7133595b023dbf5c783424fd
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:a528386c46c42cc5022889c9940d518d1a2226cba47f7799564ffc55896b8ed6
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:97a263acb2ca71c7310f4964a708cfab121ca0963060bf9530cabf5fdef150dd
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:610e181469ebb64971144d2c7cb201c7757f7945bd03ed2699c66cf0baf0e720
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:920365ebf12d4e0634b2ba8864833fd6757f702d822810ff2e57d640168a154e
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:54b5a6dd521a1b45cb162b91a9b704d4c4386a5f8889b9530f42cbe09caa6099
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:41b61bc639a04213b6833f7de468f1f82e5076d472e6d6f042b2ea45ed2b284a
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:6d52fd9b57d104e85c84131d285a3264d42dd99a5236822a774b3f660cad7d3c
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:979d9d8fd82898cf95503e877c6a336ea894bfbeca5c658ded6cb0796b591312
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:e0ed23ad7d9818b297cd8681e2077a9a2374326cb1cf28fdc4ad9ab9ee5ab080
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:57a7cf4003a7aa27f685dad36568d2bfcb45522d68dd17434af917fa8c4f13cf
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:58e1255e7075367de699b1d9aa2a757a30ac752c1b9c5b16fa0dbc2a3345748a
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm
    sha:d3889de0907d617e065020c37a8a434bef815a98d148ae7eb623a6d6f6e288c9
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm
    sha:a55bc551ea7c3bada459e24562fffba4562a44a35f14b89844003db5b89c19f4
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm
    sha:d7f81f01a1eeae04b6d74d6cf4e8dbf583430c74e3e3168d46903701d4e94359
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.