[CLSA-2026:1791467693] httpd: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-09 06:34:39 UTC
Description:
- CVE-2026-48005: mod_auth_digest: track the nonce count per nonce and record it only for a fully verified request - CVE-2026-73636: mod_auth_digest: enforce one-time nonces also when the client entry was garbage-collected - CVE-2026-73637: mod_auth_digest: do not use shared memory client entries outside the client lock - mod_auth_digest: RFC 2069 clients and AuthDigestQop none are no longer accepted (upstream 2.4.69 behaviour)
CVEs fixed:
Updated packages:
  • httpd-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:c0f7bd2afdf1275d81922ec039eb905b2a8f53b33f422a67640e8ed635b1b739
  • httpd-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:8f24fc08d810ef30195e93503ca73d5b6b4e0ab6e1de62bf9578f027ef3e3426
  • httpd-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:a18dd523dd9643012ece63645d1202a6ec19ef0f91ea13bec5ebe8057e3cead8
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:e12738c6773b17e8a94731d49f46dcb51f806e30f7f9f1adbd9cc1cf6866081c
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:64fdcfca568101851237d51a48b0eab6493a05f96cf72d0a71ce54bff97c82fa
  • httpd-core-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:25020bab917ade1d71a1898e14541d1f485a4bed1a0e779d701c4255f8749582
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:6d1d4b291cae92d5c1414acbf2b73ec060c4c87a85de3fe1783a7df1b1e226c6
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:9f34f3cb4ab577578fb1ec5b8d1dbcb2610ce57b72da573f4753e5eadedafbc5
  • httpd-devel-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:42f6d8751a566182aec04cf7f9d2fc5128893d145473ceec8ac0ec5d1117032a
  • httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els2.noarch.rpm
    sha:9c5a7c8a3a6f036b39acef2e6ff26296b1391553da6e4576991c75183c73f655
  • httpd-manual-2.4.62-13.el9_8.6.tuxcare.els2.noarch.rpm
    sha:df19878451fe1681a5aa6aa41161f3797a5b2d26132d51945e2b9fc1cfcd5d68
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:9a6f5271499e2497bf2a51aab9b61e45f0063b08d4b2ff67ddd350b06e384900
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:6892c23b5562c1ea99aa755cb5771727e4a2d87be79351c3fa54ab09c1740133
  • httpd-tools-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:9796c6892849731394b7ccb1db88d143704f9a7ec55758e48164e714371b41bc
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:b922482809aef49a84279c72e51aceb46b92c02da62cfef96486a414b2b87eaf
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:a4003edc37268be8fb938054825f47c79405573917f1a8e3767e5041288d78c6
  • mod_ldap-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:81e04f9259272ef05a3a6d79983edba3a111ba6de0669387aa02e69957e4a943
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:bd1ead0e043d7521e7cf615843bb0274bc32692dfbfd064b43124e4f877ea6eb
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:382f1cb668d676c15a4d3355e2c8551fef941660ada2e41b1a77ddd0bac8d6b3
  • mod_lua-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:0148df72f90338cd3e1ddd8dfb4127b6c57c07da3f853afbb1205efb8168b714
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:1b198e0a9a0aa36caa6d193efc7a6a4855ff71755cff104e10951898768bf406
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:5888ff746fd58cc544850ce3255d2ef18ce72a31846387511715807a7f3d3dae
  • mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:6e0a71c207ad64ab01e2a2f1ef06ececb2f48cd99f2d2f0a73698a4f7fd26125
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:9fbc64ba0600b28c087e172c8f795ee078a320dccb80a52ff3708f114ba282b2
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:3e99cdfe4772445e63cb981f758f9cd494a9195c4dcbccecd7ac6a55b0c9e553
  • mod_session-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:ca8036293b904d13567bc0235e73e0c2263668a4791733c45888529f0925be12
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm
    sha:aed60e913e67e3e5acfe1bb43f92a4aede19436fd839c9116306c6a2c76d9242
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm
    sha:e6b4d64f2ff298aa710f122a2e246c74b4b4f52981962858654ba785049d3b54
  • mod_ssl-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm
    sha:7f4d0b9a1c91693252f7f817b67251d6ee380fdaebb215dcd9ded6edbc7fe44a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.