[CLSA-2026:1790328963] nginx: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-25 09:36:15 UTC
Description:
- CVE-2026-42946: reset the upstream parser state and restore the response buffer position when a status line is not recognised, so proxy, scgi and uwsgi header parsing no longer continues in a stale state or drops already-read data
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:2f5dfa1c97cd3fbc3aeda01ac50587168781b8005ef2f250a096414e70cf9f71
  • nginx-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:7f09484b1fbf11bc10a7553626748549999c74c2a7725bb50be25422bbac082f
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els11.noarch.rpm
    sha:48bb72ba9d6bdcac667990304df965d517169054a508032f6eeca0905bf434bf
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els11.noarch.rpm
    sha:b192ec3d5add3fe13b936c86f64730b929f3a9903211cfe59a9956e5ae28f580
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:975902a2d035047adff9e427fa7d1de8331f0a9c30e99ced2a86c3cd71398aab
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:fa453e346e46dd1071764fd122e9648addcfa2709a19c1c4f153a43202f12c25
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:3aaefbe8c59dfc0e87502f0844fd0d46c2c6eb1d46d5824405ab6e2827fb734c
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:17d2e7ce5812be7999286beedc90a8f621ba70b2fa7f744ae9a8695b8a4a5ef9
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:7d3c358a419af2013db4cadca45342abedf8ed27a396dda5dbd73b02391904fb
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:850c9392a337788cd92d61757ea448849f26e9aa23eb965c95d40a59c466884f
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:6d332ba070777c1f8d594a1265824f6e1c9a2bd5d49702d3161f75b8aae19a66
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:fdbd56f6e8d93c07eb48bbede18baddd9196421a21822234b1a3cc31d773bcf4
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:950e33a679d3ae355cebe0b373befa016463df036ce24e0d09b2e679c4cd8b94
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:8de92058c223e20b3ada3ce480d61be12b2842e33eaa634575c582c4eba3ead0
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els11.i686.rpm
    sha:1871e53399490f04248d828e784bb58f7271c467ae65a85b0f4eb4a382a02e0a
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els11.x86_64.rpm
    sha:bcfd5b3b0bebb3028ff35153b3f1ab39bc93e2b59b27c00a30a6bdbd446d9809
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.