{"id":"CLSA-2026-1791482084","summary":"Fix of 7 CVEs","details":"   * SECURITY UPDATE: mod_charset_lite: heap overflow in finish_partial_char\n     - debian/patches/CVE-2026-56153.patch: mod_charset_lite: heap overflow in finish_partial_char\n     - CVE-2026-56153\n   * SECURITY UPDATE: mod_heartmonitor: NULL pointer dereference on malformed heartbeat\n     - debian/patches/CVE-2026-46729.patch: mod_heartmonitor: NULL pointer dereference on malformed heartbeat\n     - CVE-2026-46729\n   * SECURITY UPDATE: mod_rewrite: use-after-free via LA-U lookahead variables\n     - debian/patches/CVE-2026-56154.patch: mod_rewrite: use-after-free via LA-U lookahead variables\n     - CVE-2026-56154\n   * SECURITY UPDATE: mod_proxy_html: out-of-bounds write in dump_content\n     - debian/patches/CVE-2026-56449.patch: mod_proxy_html: out-of-bounds write in dump_content\n     - CVE-2026-56449\n   * SECURITY UPDATE: mod_vhost_alias: stack overflow with oversized Host header\n     - debian/patches/CVE-2026-63292.patch: mod_vhost_alias: stack overflow with oversized Host header\n     - CVE-2026-63292\n   * SECURITY UPDATE: mod_proxy_uwsgi: response smuggling via Transfer-Encoding\n     - debian/patches/CVE-2026-63718.patch: mod_proxy_uwsgi: response smuggling via Transfer-Encoding\n     - CVE-2026-63718\n   * SECURITY UPDATE: mod_http2: use-after-free via shared session bbtmp re-entrancy\n     - debian/patches/CVE-2026-57941.patch: mod_http2: use-after-free via shared session bbtmp re-entrancy\n     - CVE-2026-57941","modified":"2026-10-26T09:43:46.125847182Z","published":"2026-10-08T23:17:53Z","upstream":["CVE-2026-46729","CVE-2026-56153","CVE-2026-56154","CVE-2026-56449","CVE-2026-57941","CVE-2026-63292","CVE-2026-63718"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1791482084.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46729"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56153"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56154"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56449"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57941"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63292"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63718"}],"affected":[{"package":{"name":"apache2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-bin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-bin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-data","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-data?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-ssl-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-ssl-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-suexec-custom","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-suexec-custom?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-suexec-pristine","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-suexec-pristine?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"apache2-utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"libapache2-mod-md","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-md?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}},{"package":{"name":"libapache2-mod-proxy-uwsgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-proxy-uwsgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791482084.json"}}],"schema_version":"1.9.0"}