[CLSA-2026:1791552215] httpd: Fix of CVE-2026-63686
Type:
security
Severity:
Important
Release date:
2026-10-09 13:23:44 UTC
Description:
- CVE-2026-63686: mod_xml2enc: on a charset conversion failure in xml2enc_ffunc(), pass the unconverted remainder through raw and remove the filter, and treat APR_INCOMPLETE as non-fatal
CVEs fixed:
Updated packages:
  • httpd-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:b9eac78e87c0c67f7439fbdb71c4cc6747179a58ca4dc38e15f5996f01827279
  • httpd-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:8ecdf5fab978bcbe7e8affd3f7212e43a93387c9f4130aa81201082516ac7a94
  • httpd-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:dd84431394cd59a42f4cbcc59c2ad74782d07e39ff58b4737c920c7a2423b476
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:2f73b5662cf2a9098a70e445d3f4206362b086a28b9787c74e300594e353b912
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:ddcb9c8553e310a3d4ed78912145f012044793bd564db435ca64e9f9bfcf0836
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:a29df3670a77764af1a41e1f66b139d5bfddc9a6769ecba59cbe59db59e98f14
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:221f66fc5cfe5e04e45c5bd846a95481342d29b81def923f199f8412633d6c04
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:8bc7d66641c16c3501af98683d91d75f5cee411241a2085f07c528d563c736fc
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:4e11d8cbfda9ab758ff22604e5d987580d74f25a11dddf79f46b6e74e42b0a5f
  • httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els3.noarch.rpm
    sha:af22e65c0060008e12d606131e8ae7cf7e7e5dababf0c806ff341c1acbe6e683
  • httpd-manual-2.4.62-13.el9_8.6.tuxcare.els3.noarch.rpm
    sha:9b3579e1e45c10c6902a7bae67c40c9a7306aafb520e7654f1b457cdbd9dee89
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:f39eaee2334735e0e249a7535b5ed0140919cba3060e76a98917ab0f5d72d98a
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:266d85da79959eb6b5c317f9278f4739e9b58b048eeef78627812105a14d16d1
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:639c34528d355dcf3832874a5eda14124465bdd2d632df27bd319c22b3249163
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:21c2a21f66cc8d48f5208e5d0c601bb86fe0b5d51c5ed57db87ff43fccc28811
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:2b837aa619796dd9f154a09f5a7e8cb4f5b30e21d7d214a62129099e206cd2f7
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:6bf0c88a058bdfa91b978bbebb8f6d8da00a4082248dac627e517afc8c4a0772
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:4ef9b63cbe83b6c652098e2aecd3817af121068b1bb9b6bbc274e4fcc289e42f
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:a8d300b4d6cb535fccfd8e525775afc7c7e587c7ef3389e7ff32ef0de508452f
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:fc41cf7624f20d26e70d2b1459a0cd05c866380ada29869ee5f747f91ca794fc
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:b60453472947f658d6345f1be9b293f4087dfdbaa93e49b8c244a71df4e6c935
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:7b70e274ef2b03725c40cac85ba2681a58956f0f5180a3c0ad473746ebde4dad
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:7da598d2336c8c28018e89d85e74d06dfe08a4c7162c755091e33bc1d88d7cea
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:bc615c7baecac70260da68641c35fa6bb874e8dcd00066ec108e46b7234fe727
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:c54137998a103838d7c1dd4bdb3b1f9b7e4c2e60de90e68fd3098a62ff1b1968
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:10a80decc116edebe321e64face73c51b0e3ccc7e1460f21d8a54dbf141f1bd4
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm
    sha:ea3383d0ead01d8d36b0938df96d7d33024cfa481abde40c6f6eda12aaa81c15
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm
    sha:b57e8babeac922dfcbc969b18c37d25fcc219e585517bed3971624ad88f6c395
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm
    sha:d9a51e44eb8f6a3ed3fc93d96fc79d01a565f3eff93227923bb0063b5e78477b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.