[CLSA-2026:1794430037] httpd: Fix of CVE-2026-106023
Type:
security
Severity:
Important
Release date:
2026-11-11 20:47:32 UTC
Description:
- CVE-2026-106023: mod_md: NULL pointer dereference in md_get_by_domain() on requests without a Host header
CVEs fixed:
Updated packages:
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:3a7efb8df882098131a4beb9fe24f63edbf8d612d82f73f475093231ef6b0488
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:8e372d6cdc54c321347248d51fbcd48327507e87367f996a6f7468cd7d04747a
  • httpd-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:5f73661c028849c5720659001d998b62d2b3c7e94ec89f8162a3f3e014d45866
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:ad641a2ab9338f2d3962247b412b030115e2032f7e3fb73c07e4985f01582c24
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:00467f5f796ea886c83d0a9b48960cb8aa925947fd7e36d24b3b0d50b4f6f036
  • httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:e6494c8a957c585ead327682889ddc849ed74409ca3d200e5ae79832df802dc0
  • httpd-filesystem-2.4.69-1.amzn2.0.3.tuxcare.els3.noarch.rpm
    sha:ef114cc4ff7f7d3feb2cbecdea5180a74a242896c3560a6708629f50456b2514
  • httpd-manual-2.4.69-1.amzn2.0.3.tuxcare.els3.noarch.rpm
    sha:a9527348313da625c311c1a97a0efa1c34fdf98b85da4e0155c1b07b575cb7fa
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:3df662feec0895853a9130f647f6611aa06c174774c121ae754da97f61923528
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:15631c15590d1487d886f61ae3abb3342c206c78610d5e935e925c5fb84d017f
  • httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:17ca11713fe9281e0f137e89e7e0126454273fdd3db5daf4c566a9124b38f5aa
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:bb4c651efced6f2e8275835ef6c609c3bfe90d7a2a79b0c0a7a558e74b5dfea2
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:0e40dc4b2b94b901f2e6aa5dff21e015eb576044ec99d8c3ef8921d94d3e826b
  • mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:398fa6b4e9ef010ad21cd9a96f7b5b09ee581ad2e33b1567d2463d922f82309f
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:99150a1032ce295617eeb4c2ae8f99de289be50005b8df1b94013dd49b27598d
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:7e2e2d8f681c24e9a74e1087a9ee30615c3632ff604d180656176574eaaeda73
  • mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:8e7b1bcea199f9f147862bf10f1f1aab5631e32668ae7de5f8e5ab3dae473f8e
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:ae9a14549ba1251f367a246213a6cea72dfb5a150014bf98fb69fc246d139d76
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:0544e2a43dea3d5e283b382fb99d6e6023357cc3b8912eb10c2155b4a22821ea
  • mod_md-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:f100cc35ded4465d9b4a9d61f041a8996fad38cbe9adfd44ca156e45ccd03e6e
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:1efc2556af930a8d05e51aa8e613bb1c97d86b1f84a8a0cb1c9ba9d55930a663
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:a9bce3d99cf5dc2ec0df6e5a0b1b84c8ac2aff2da1781c93b8afb7ff2857dfc8
  • mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:b5ce46b5f34c9e2ae40b48ae935c6a520fea67602720493984038967186b376c
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:ad8c6fc37e0ea2f648ebffb76eb6f2aa5523917e079ec32086ba5b1e44223617
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:947ee47b5c14fd5a32f8e74df3b47d1dcef1d19b86602a3de2251b6ab7a319b5
  • mod_session-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:5c5564e8daabf6ffa16d448b82762df3b787e1fca20e3c5840e54f921ca64f31
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els3.aarch64.rpm
    sha:e82fa85711776543a26020397b681465f9397a729ffeacbb9fae22e511107c81
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els3.i686.rpm
    sha:4d94bfa4fa224cd0233cde6ac6b5d2d8e227d0f0f11364ec2f67dc1ab8abab90
  • mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els3.x86_64.rpm
    sha:1dfeccee22106f9b06fb484273d9c9cf05b273061e3d2c86e40fd76f31091181
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.