[CLSA-2026:1794423677] httpd: Fix of CVE-2026-119618
Type:
security
Severity:
Important
Release date:
2026-11-11 19:01:31 UTC
Description:
- CVE-2026-119618: mod_http2: heap corruption from assign_headers() writing Content-Length to the shared request header table
CVEs fixed:
Updated packages:
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:b49903b12070f47a6d1700cf27c71f2c965c30e67a123ec7f4d8b9bb75ee78c7
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:fdac985638571935c670269da5ebf36b33f2abf0dfd4def89bec81ae73da83a9
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:c0fb5821aad8bfc43d0d7c53b942e6363f58dbd4bd5acf60c5a141fd68191355
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:3f8ef60733c7b3abc530f3a46616bb444bf63708d22a60a2e2b651836693048d
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:eb6b33c026b6db22976dc74b2641352c57bdb5ff7270f1061054b00dd97fdb7b
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:1efa1efc33816b463b34429eeed71ec6ec1046889b254e2fa45932d4c836f656
  • httpd-filesystem-2.4.69-1.amzn2.0.3.tuxcare.els2.noarch.rpm
    sha:fa77273959c63172835f53cf5c855476135bf6e1149ec0b9c68e2d8c10f1f25c
  • httpd-manual-2.4.69-1.amzn2.0.3.tuxcare.els2.noarch.rpm
    sha:203f2578e30924a8f27024cbce45b5ea5d854213fe4bddd008d180dd4ad0acee
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:f5c71b5933c8a0b62d7465d9a8911ef7b784ed233a404084fb849e70f7a63165
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:dd2f0da8d157c4313c5af96f6e9818b716de36a54b1817592f0e6f2ac2a5a280
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:bd5c272bf8160794db43754534da19ccc1cc364b885b2a851ec786d5132d060b
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:adddd6b0bae6c6d09ed1f702d8cda74ac77a2ed95bc6be56cadbd2c92055f407
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:913ead02208ae84a2f232c898467799716d493bb86faab5bb32b95655e8297d3
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:f21b1217f0a69504e58a2c077dd61d6ad8345361bc107f63bcda273a5c3c73a0
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:91a784707b2c923d396a209aec26329c6f2fb1e6ccf0ff1849d9e4baa45430b2
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:2119312775fdef454ff5f5f95bf9016362c8be467387f3b331f170c75f819b9f
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:81446b9850b88df307811a21267868bf20bea88803c42d82784d5b5d249386d9
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:ea2b119df71a3d1051833178231db22da44115d7f7d53151ce42bc4c1f09966b
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:fcf4e129371d0949a22bdd91a5b78c6e2203af9b10e9f29dc497064f01b1b7cb
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:bcb6512b9af6bd881a42b19221c629b20426991d5b678f5d509b479e70980b94
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:1fb4f3721ccacf2942b2fdfef0cda8768d93888e0ea0acffceccd31c71143148
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:c06344ad9099f04fa13dee34a3ab40b03f97b359df4eb4b49086394e85eba30f
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:9a2071b25a54e67677527da172a771ce2b6ab0ce7ea7abffb10edb3d53bb580d
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:e0e4ea65657154ed69fe693c4c1f1423388ea4de89a5cbd7d6a2cd9bf8dc1352
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:fa892d3cff100dc188ade7e63d8a0d8ac98e2c0c3cbf7ef9fdaf46cfa2620c2d
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:ea9768e46fa4a878d884701d947367a988a70e6e63cc4c9cfc5c2db2206d588f
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els2.aarch64.rpm
    sha:b7962970fa680fde758b8e91b3abcf9d99a6f5b6ac1e2b53cee3e0c90b6900cf
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els2.i686.rpm
    sha:2eec5c9f1b0f0e483f69e9e2f529e1740a7403fdd5f1e42362ec7e5a74174f6e
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els2.x86_64.rpm
    sha:836b4b808d3863ecb91bda9e3085051d1eaca20e41c71208c67ae7b4cce18375
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.