{"id":"CLSA-2026-1778178379","summary":"httpd: Fix of 2 CVEs","details":"- CVE-2017-15710: mod_authnz_ldap out-of-bounds write when accept-language\n  header value is shorter than two characters\n- CVE-2017-15715: regex anchor in \u003cFiles\u003e/\u003cFilesMatch\u003e can match before an\n  embedded newline, allowing .htaccess bypass of trailing-extension filters","modified":"2026-05-27T11:18:16.924486292Z","published":"2026-05-07T18:26:24Z","upstream":["CVE-2017-15710","CVE-2017-15715"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1778178379.html"}],"affected":[{"package":{"name":"httpd","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/httpd?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778178379.json"}},{"package":{"name":"httpd-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/httpd-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778178379.json"}},{"package":{"name":"httpd-manual","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/httpd-manual?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778178379.json"}},{"package":{"name":"httpd-tools","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/httpd-tools?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-72.el6.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778178379.json"}},{"package":{"name":"mod_ssl","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/mod_ssl?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.15-72.el6.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1778178379.json"}}],"schema_version":"1.7.5"}