[CLSA-2026:1794570775] mod_http2: Fix of CVE-2025-49630
Type:
security
Severity:
Important
Release date:
2026-11-13 11:53:07 UTC
Description:
- CVE-2025-49630: tolerate a missing Host header in the h2 proxy (assertion failure)
CVEs fixed:
Updated packages:
  • mod_http2-1.15.7-10.module_el8+2810+da11e245.tuxcare.els1.i686.rpm
    sha:595e00da6918d6a6e6c4abd7854f1276405554440e1dce3c30ea2416770ac840
  • mod_http2-1.15.7-10.module_el8+2810+da11e245.tuxcare.els1.x86_64.rpm
    sha:7c87a1b9efb910886f284572e708cae7302cecb39907098ca3d1bed683364e14
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.