CLSA-2026-1791471297 httpd: Fix of 5 CVEs

CVE-2026-56153: modcharsetlite: bound the partial character buffer in finishpartialchar - CVE-2026-46729: modheartmonitor: validate the heartbeat POST body and query - CVE-2026-56154: modrewrite: copy the lookahead Vary value out of the subrequest pool - CVE-2026-56449: modproxyhtml: don't dump...

CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's

Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...

CLEANSTART-2026-GY12147 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLEANSTART-2026-PP80959 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLEANSTART-2026-TY04609 In Apache httpd 2

Security vulnerability affects the apache2 package. In Apache httpd 2...

CLSA-2026-1791323880 httpd: Fix of 4 CVEs

CVE-2026-56153: modcharsetlite: heap overflow in finishpartialchar - CVE-2026-46729: modheartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-56154: modrewrite: use-after-free via LA-U lookahead variables - CVE-2026-63292: modvhostalias: stack overflow with oversized Host heade...

CLSA-2026-1791459292 httpd: Fix of 3 CVEs

CVE-2026-63718: fix modproxyuwsgi response smuggling via hop-by-hop headers from the backend - CVE-2026-73636: fix modauthdigest one-time nonce replay - CVE-2026-73637: fix modauthdigest use-after-free on concurrent requests - CVE-2026-48005: fix modauthdigest forced re-authentication via forged...

CLSA-2026-1791458607 httpd: Fix of 3 CVEs

CVE-2026-63718: fix modproxyuwsgi response smuggling by dropping hop-by-hop headers from the backend response - CVE-2026-73636: fix modauthdigest one-time nonce replay - CVE-2026-73637: fix modauthdigest use-after-free of shared client entries on concurrent requests...

Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server

Description: This update fixes the following issues: Release notese highlights: Added a note about the SUSE Registry IP address change. Update to SUSE Multi-Linux Manager 5.2.1 Security issues Fixed: CVE-2026-39821 Bugs mentioned bsc1208800, bsc1230568, bsc1230949, bsc1258382, bsc1266481...

CLSA-2026-1791396690 httpd: Fix of 5 CVEs

CVE-2026-56153: fix modcharsetlite heap overflow in finishpartialchar - CVE-2026-46729: fix modheartmonitor NULL pointer dereference in the heartbeat handler - CVE-2026-56154: fix modrewrite use-after-free with LA-U/LA-F lookahead of HTTP headers - CVE-2026-56449: fix modproxyhtml out-of-bounds...

CLSA-2026-1791396324 httpd: Fix of CVE-2026-56154

CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...

CLSA-2026-1791392163 httpd: Fix of 5 CVEs

CVE-2026-56153: fix modcharsetlite heap overflow in finishpartialchar - CVE-2026-46729: fix modheartmonitor NULL pointer dereference in the unicast listener - CVE-2026-56154: fix modrewrite use-after-free via LA-U/LA-F lookahead of HTTP headers - CVE-2026-56449: fix modproxyhtml crash in...

CLSA-2026-1791391794 httpd: Fix of 5 CVEs

CVE-2026-56153: fix modcharsetlite heap overflow in finishpartialchar - CVE-2026-46729: fix modheartmonitor NULL pointer dereference in the heartbeat handler - CVE-2026-56154: fix modrewrite use-after-free via %LA-U:HTTP:... lookahead - CVE-2026-56449: fix modproxyhtml out-of-bounds write in...

CLSA-2026-1791293022 httpd: Fix of CVE-2026-56153

CVE-2026-56153: modcharsetlite: out-of-bounds write in finishpartialchar when a partial multibyte character straddles buckets; stop filling ctx-buf once it is full...

httpd: Fix of CVE-2026-56153

CVE-2026-56153: modcharsetlite: out-of-bounds write in finishpartialchar when a partial multibyte character straddles buckets; stop filling ctx-buf once it is full...

Fedora 44 : httpd (2026-34b2d69632)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-34b2d69632 advisory. This update includes httpd version 2.4.69 addressing various security issues, see https://downloads.apache.org/httpd/CHANGES2.4.69 for more...

CLSA-2026-1791311011 httpd: Fix of 4 CVEs

CVE-2026-56153: modcharsetlite: heap overflow in finishpartialchar - CVE-2026-46729: modheartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-56154: modrewrite: use-after-free via LA-U lookahead variables - CVE-2026-63292: modvhostalias: stack overflow with oversized Host heade...

CLSA-2026-1791310786 httpd: Fix of 4 CVEs

CVE-2026-56153: modcharsetlite: heap overflow in finishpartialchar - CVE-2026-46729: modheartmonitor: NULL pointer dereference on malformed heartbeat - CVE-2026-56154: modrewrite: use-after-free via LA-U lookahead variables - CVE-2026-63292: modvhostalias: stack overflow with oversized Host heade...

CLSA-2026-1791292931 httpd: Fix of CVE-2026-56153

CVE-2026-56153: modcharsetlite: out-of-bounds write in finishpartialchar when a partial multibyte character straddles buckets; stop filling ctx-buf once it is full...

XiongMai uc-httpd Overflow (CVE-2018-10088)

Exploits CVE-2018-10088 in XiongMai uc-httpd 1.0.0 used in many IP cameras/DVRs: stack buffer overflow via oversized HTTP headers. Verifies uc-httpd surface and sends the canonical overflow trigger arch-specific shellcode may be required. !/usr/bin/env python3 -- coding: utf-8 -- """XiongMai...