[CLSA-2026:1790332938] nginx: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-28 08:45:14 UTC
Description:
- CVE-2026-42946: reset the upstream parser state and restore the response buffer position when a status line is not recognised, so proxy, scgi and uwsgi header parsing no longer continues in a stale state or drops already-read data
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els11.aarch64.rpm
    sha:40902a80c88f9e2a8fe00430a71704651687924691357c37534a4bdb98caa5f9
  • nginx-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:1abbbcb228b468288052a664aa22602e8bfcc45c9a1e8b136222899f60a8625c
  • nginx-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:ba407f68f167f71c232d75a6ac85ff8c4a71f7f4ec32e0063a2fcacfd014bac5
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els11.noarch.rpm
    sha:6cfa4647b1c58b0b8a043ccfc0690995ecf2d456d9ac09d5b66b281ececaf05b
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els11.noarch.rpm
    sha:eb7dc1c40fae1cf50a7210e042e844a3ff0cd0eea7f0c6a2ac70038caab7d252
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els11.aarch64.rpm
    sha:111c411f957ecb01d70a684901491c6e259897d6ce152a21bb4261ae0f173711
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:18857e2714014f76d58854c0306ca83133cc0bd9dad663bc0d474c5b79f158c1
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:28385feea263fecb60dffd3921376d465b67d4aa1c22c0521668ecd2d4f2b801
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els11.aarch64.rpm
    sha:ded98703a6691c0536bd3003d0c18457875696553a2f44b764b25bc918771108
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:acd707a1cbadc319eafa3366532649e74bf531e70680c3b5e55d2597545c5483
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:f0a91ecb58fec1160f7d4f7afd8a65b4b3a8ebcd45a509e78103459f154b795f
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els11.aarch64.rpm
    sha:f3af8e085a5090107f0c980242561abebb1bd43cf2d10eee31ad361a4111460b
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:2e3dc4c58b997dabf2ec01903e64bcc00ba5cd8ccef3900f29a6007e4ba39853
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:651b1fdf2b647dbd5b3d378d0b169ea5558dc814a87936bd63ade1c0e41f6091
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els11.aarch64.rpm
    sha:f33f05fe9963087c57cfcfc2806629200fcc8b30d1a1b279a98549e35e318d2c
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:08e249df6c80acb81e7a598a8dc3fd8e7028d577bf393b1762e6939a3cff8e85
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:1d147a7746c94fc61b6ec7a451ef682ead7251f4c91468e1aaedf431b9ace8a8
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els11.aarch64.rpm
    sha:dc2f1fc81164af551449cb13efb4f180b28c1b433b5afd89246b6868997c9db4
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:959431b9a96f1edc11f691dea6259d95c0eb215cb57d42210ad30d023b69d362
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:b1ae822ed777995995db9868b3705bf9923dab4f43cd7524f77a0c458907e5e3
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els11.aarch64.rpm
    sha:40929b7c32ae485cc8388752638ccc01e580247bdd5523b1ef612b3b85ffd9dd
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:fbb44dc7ac367d36724c8b516eb5f4bf5b91d0699404bf9124529a425f4c1445
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:f8c6f39049e49642aa6f3fa0d6b592f04898e999782f75d2f1e4b97125270755
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.