{"id":"CLSA-2026-1779119053","summary":"Fix of 8 CVEs","details":"   * SECURITY UPDATE: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string\n     - debian/patches/CVE-2026-34032.patch: add buffer checks in\n       modules/proxy/ajp_msg.c.\n     - CVE-2026-34032\n   * SECURITY UPDATE: AJP getter functions off-by-one out-of-bounds reads\n     - debian/patches/CVE-2026-33857.patch: fix length checks in AJP msg_get\n       functions in modules/proxy/ajp_msg.c.\n     - CVE-2026-33857\n   * SECURITY UPDATE: mod_proxy_ajp heap over-read in ajp_parse_data\n     - debian/patches/CVE-2026-34059.patch: fix message length check in\n       modules/proxy/ajp_header.c.\n     - CVE-2026-34059\n   * SECURITY UPDATE: mod_authn_socache crash in caching forward proxy\n     - debian/patches/CVE-2026-33007.patch: validate URL earlier in\n       modules/aaa/mod_authn_socache.c.\n     - CVE-2026-33007\n   * SECURITY UPDATE: HTTP response splitting via malicious backend status line\n     - debian/patches/CVE-2026-33523.patch: scan outgoing status line for\n       newlines and controls in modules/http/http_filters.c.\n     - CVE-2026-33523\n   * SECURITY UPDATE: mod_rewrite elevation of privileges via ap_expr in\n     .htaccess\n     - debian/patches/CVE-2026-24072.patch: use AP_EXPR_FLAG_RESTRICTED in\n       htaccess context in modules/mappers/mod_rewrite.c and\n       modules/metadata/mod_setenvif.c. mod_proxy_fcgi hunk omitted —\n       ProxyFCGISetEnvIf was added in 2.4.26, after this source.\n     - CVE-2026-24072\n   * SECURITY UPDATE: mod_auth_digest timing attack allowing Digest auth bypass\n     - debian/patches/CVE-2026-33006.patch: use a constant-time comparison\n       helper for nonce hash and digest checks, add VALID_NONCE validation\n       and MD5_DIGEST_LEN length check in get_digest_rec, in\n       modules/aaa/mod_auth_digest.c. Inline ap_crypto_equals_const_time()\n       replaces apr_crypto_equals (added in apr-util 1.6, not in xenial's\n       apr-util 1.5.4); the upstream apr-util version bump and the\n       apr_crypto.h include are omitted accordingly.\n     - CVE-2026-33006\n   * SECURITY UPDATE: mod_proxy_ajp ajp_msg_check_header bounds-check fix\n     - debian/patches/CVE-2026-28780.patch: tighten the upper-bound check in\n       ajp_msg_check_header() to reserve AJP_HEADER_LEN bytes of headroom in\n       modules/proxy/ajp_msg.c (companion to CVE-2026-33857/34032).\n     - CVE-2026-28780","modified":"2026-06-04T10:04:43.100126848Z","published":"2026-05-18T15:44:17Z","upstream":["CVE-2026-24072","CVE-2026-28780","CVE-2026-33006","CVE-2026-33007","CVE-2026-33523","CVE-2026-33857","CVE-2026-34032","CVE-2026-34059"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1779119053.html"}],"affected":[{"package":{"name":"apache2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}},{"package":{"name":"apache2-bin","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2-bin?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}},{"package":{"name":"apache2-data","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2-data?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}},{"package":{"name":"apache2-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}},{"package":{"name":"apache2-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}},{"package":{"name":"apache2-suexec-custom","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2-suexec-custom?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}},{"package":{"name":"apache2-suexec-pristine","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2-suexec-pristine?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}},{"package":{"name":"apache2-utils","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/apache2-utils?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1779119053.json"}}],"schema_version":"1.7.5"}