{"id":"CLSA-2026-1783529026","summary":"Fix CVE(s): CVE-2026-44631","details":"   * SECURITY UPDATE: buffer underwrite in ap_regname() regex capture handling\n     - debian/patches/CVE-2026-44631.patch: cast the PCRE name-table bytes to\n       unsigned char in ap_regname() so the capture group number cannot become\n       negative, and reject capture numbers above 1024, in server/util_pcre.c;\n       check the return value in the \u003cDirectory\u003e, \u003cLocation\u003e, \u003cFiles\u003e and\n       \u003cProxy\u003e section handlers in server/core.c and modules/proxy/mod_proxy.c\n     - CVE-2026-44631","modified":"2026-10-26T09:31:52.317170052Z","published":"2026-07-08T16:44:03Z","upstream":["CVE-2026-44631"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1783529026.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44631"}],"affected":[{"package":{"name":"apache2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-bin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-bin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-data","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-data?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-ssl-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-ssl-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-suexec-custom","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-suexec-custom?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-suexec-pristine","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-suexec-pristine?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"apache2-utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"libapache2-mod-md","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-md?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}},{"package":{"name":"libapache2-mod-proxy-uwsgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-proxy-uwsgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1783529026.json"}}],"schema_version":"1.9.0"}