[CLSA-2026:1794563080] nginx: Fix of CVE-2026-97205
Type:
security
Severity:
Critical
Release date:
2026-11-13 09:44:50 UTC
Description:
- CVE-2026-97205: cap the number of pending asynchronous operations per request, so the 8-bit r->main->blocked counter can no longer wrap and free the request while those operations still use its pool
CVEs fixed:
Updated packages:
  • nginx-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.i686.rpm
    sha:681dafebddebce94433a39db6524c77a2b1948bcaa5d198f3d28057c04b991d8
  • nginx-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.x86_64.rpm
    sha:6e18f6086ee55fb217704a83fae2ec26d86447f63c7107469a4fd805faa6f958
  • nginx-all-modules-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.noarch.rpm
    sha:00fa1cd0a797e36dd25795be65fd177df59aa1bb7412dc389e1814f32eda4055
  • nginx-filesystem-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.noarch.rpm
    sha:f0e31a65865350bc2bc0014390be1018ae0e43d71799171cea24db62fe3940ff
  • nginx-mod-http-image-filter-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.i686.rpm
    sha:122cedf4a5c3340a449f21a49f7bfb7dd7d85baba491498b04649da84caff981
  • nginx-mod-http-image-filter-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.x86_64.rpm
    sha:8921467f4b9236ff32d27ad889c15697d73f6afa2eaace79c4cd05aa59679379
  • nginx-mod-http-perl-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.i686.rpm
    sha:c395a5628fbd2cf70b056ee25f296fc61d600c5d9a0cad73a86967bfe84041db
  • nginx-mod-http-perl-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.x86_64.rpm
    sha:c9b535659f259341b85d6e79493a6f89a731f2c7b2336a43533388e1bb0d3a2a
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.i686.rpm
    sha:c4155ad9a819f134dac2877a2f6d2063d3b4fbe79867c1c33955b43f92596f3f
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.x86_64.rpm
    sha:ab61367def958ac3577bf9ae1067aa9857f3b12ad945c3a0bc776acccb0f0913
  • nginx-mod-mail-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.i686.rpm
    sha:9686cab8eaf2d513180b59c12ce7c20224151e20bb0f421185672c7f83802465
  • nginx-mod-mail-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.x86_64.rpm
    sha:d559c17fcff98488db34a9dc7c5c2e984946af353a717e5fa9a27079535a856a
  • nginx-mod-stream-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.i686.rpm
    sha:401015c02949b608fdf9a2cf3306627e72765dcc6119704c94c9813797c85d68
  • nginx-mod-stream-1.14.1-9.module_el8+2806+4208e4ff.tuxcare.els18.x86_64.rpm
    sha:6b2265220e528b2c4d31110065a6fee97d35d52b8c0271160977c7158a20956b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.