[CLSA-2026:1790329264] nginx: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-25 16:12:10 UTC
Description:
- CVE-2026-42946: reset the upstream parser state and restore the response buffer position when a status line is not recognised, so proxy, scgi and uwsgi header parsing no longer continues in a stale state or drops already-read data
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:ae5d637cb47a3c5ff9276e3423363fb6d54115031cb88da54f039b9258932284
  • nginx-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:9013335f441477c1e16c55336b0d886f4746dd421df513e76e7553452ec033b4
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els11.noarch.rpm
    sha:2010958ccd429b27a105ce58cebcd8e761c497a1e2f7168432abb492955a233e
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els11.noarch.rpm
    sha:3954cc216303d70a0e440587c2de067b290143934f9ae9b71db32b5bd896fba7
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:1ab354edcf6b3c87a185b999a09b2c3d6a78027334d7ee7f068b83d4b121fb32
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:6f4cc13120c1832dd24eb2703b97100569af50c2d506ebca85d51518792e06a5
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:c4c928dbdc62f721be57f646c7270c313d2b2011922e69697aee252e8fc220a7
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:5af327c4645e345307c920ef85ca44e96aefa98e7e77325f5a1a25ea92c935ed
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:f3c7f55a3704926a51ea19adb14382deee60d82c4b8652570a20e80fc9c6f7df
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:8d6af45d89628d8bb095651defcecb94808a68ed4ce192732f4a58d4d9f2d4a5
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:d60cb0f2ac3d1a681aee524719d08f6d4474cee381eb543a2ac4f87a017f393a
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:625789bb533cb362bf8233859ed0aef233a6957c3fee075a1a618981fb03e1d3
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:623ce024fa984cfdb34f9fe85efb69de0145c79d45bcc0d6ded4d299dc499683
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:4bf373b4560b95bf582caa9b5def082e4bc300da14b81d8f1f1338a58568460e
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:9795b16b9198a559f4c5255c9315465e20d05917a6e1f565513034a3a7a1b3f2
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:3a44af9b0c20e5b8572aa9c8d2a60b9e51ed03b9af6b4e62d8fdb9c131865890
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.