[CLSA-2026:1791829330] httpd: Fix of 9 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-12 18:22:25 UTC
Description:
- CVE-2024-43204: mod_headers: RequestHeader no longer changes the response Content-Type; "Header set" and "Header setifempty" of Content-Type no longer mark it as trusted - CVE-2026-33523: reject control characters in the reason phrase of forwarded status lines, including interim responses - CVE-2026-59797: mod_ssl: do not allow file() and filesize() in SSLRequire expressions from .htaccess files - CVE-2026-79768: mod_userdir: reject "." as a user name so that "/~./" no longer maps onto the base directory of an absolute UserDir - Also ships the els4 fixes: CVE-2026-63045, CVE-2026-29170, CVE-2026-42528, CVE-2026-93546, CVE-2026-58415
CVEs fixed:
Updated packages:
  • httpd-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:1ca74ad2e060a98f98f2f017b265789ba57939da7add9fcc381e430955af675d
  • httpd-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:25ab4c105293cb0d66006db8f9ef82798de84eca5489ce778e66fa62e803981f
  • httpd-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:3e75f650849c0b7f3df39fd13cfad4d55b0eafef0af335751b6632ee26e92216
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:c2ca2744b530edb1f5ce6b389dac021e80baf244e42be8cac894314fb8336c8e
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:897c99bbfa41f54d46e590a5c3b102f46ed53ec4dd8be58624eae9bc13516c84
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:bc7bb516f9686676eda2797b8170fdbea6c56a8ff25585bba7433671a0d1ae97
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:c3be9f0557ff8a06f7c5a5ad041452337bd71877dd686d7b294be856743b7002
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:b5be866a86820ceec4c227817ea55555b8c583ece063d7181eae5cbc9383593d
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:587d8e7a9b7eb8f129efbcc123f3b797a23f693540e85a6f3f89fe53e7b2a72a
  • httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els5.noarch.rpm
    sha:eebe92e2b4a228352b8178d26f09a5206b6755cd08ccd1b4fe0019dc4ceefedc
  • httpd-manual-2.4.62-13.el9_8.6.tuxcare.els5.noarch.rpm
    sha:82032b3f81b9bce247f6f0ce795aa3dbd4e4cb59dba086118ccaadfd6de45f8b
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:467fce1b7ab4ac2c07852afbe9a0c8930ff0fea0e0f1843b4823d755e9e3338d
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:4df0f9b6ab7222d698fcdf6896ecff5376324fe006e8fc9c2bebb368014011f9
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:22658dd4db20377a2cc718f092335653317a3f883cc05900a43a279b3beedfcd
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:0b06edfd86420a02c6cd6ee09704f60d246e9e8f40e250abb8bc12eed77072c7
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:5281b090d148b2778d2c3eb4e5961387bebcaf976035a61634324a7765649304
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:aa9d18c276bb03a1a819f4c00a28c9a30fa0dc6d8e0fdffd6a6363df1cc2e310
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:9e95d4c84354ab5f53afb3adcd8b8f65aaee37ec070f345efe0c589a4cc42a55
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:291890af4339a3a1e075a118f0d1583677228d2c7a94ed8154282cc00bfb2e64
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:45c09de93c88dcea2611bc7a51b05a3c7812355c18f0a22b24b35673645b730a
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:3e41f3b356f73749232b42cb37d0aac5ba711f4e01e04e919a7e657d8ec258d0
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:c5ffe189ae03a692540ddf0c5dbc1bfcb321faea6501a641c48734c918a93d66
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:cf1bcc5b618f00717f803a876718a33fb9a8adbb5b7c01c342d70c0b9f1c273e
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:c2de47ea2472dc07ff6d704cf3c2fd4d5a881ced9099b4188550867f2b86b111
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:3ce0129b57d9d522aa5190e427110c4c3ab1f0f7f0f4f24adb3a6d8be9d0e4e8
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:c016124c3de8296c9ff885d9af75dc5220a970aaf7c5ac7432bee57fd01bc2c6
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm
    sha:a38dcfef86df57e3578b78f2f36478c33cff47c905a52edc5d60b13d7130b719
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm
    sha:eb55e7593769636924acb671fb7350f72848fc1b4f97fe6ec3b106cc18a0cad0
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm
    sha:1432e21693ee10ae2ca118c32966aecfe8d56bcd66bff7cc551fc3ffa15dc2f5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.