[CLSA-2026:1792768506] nginx: Fix of CVE-2026-56434
Type:
security
Severity:
Important
Release date:
2026-10-23 15:15:17 UTC
Description:
- CVE-2026-56434: fix use-after-free in ngx_http_ssi_module by skipping a subrequest post when the request is already posted and resetting r->write_event_handler during subrequest finalization
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:12d2e64a16e49c72e2dbf9a3e95768802e35853ad9b22e51e94daca57ae8f9d7
  • nginx-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:b9b90601f404b196ad20b812b0bc6bbd3e37bd6931abffb8613eeeff4db25e04
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:de48b853b207d3ed53f79dfae057a5674d44b1138e25f05cd4fed5d8c32ad805
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:1f7ca05dbc610da492cb341f2ed52e32f39a667fd17284acab16aefcd14bb044
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:764018c0876d13f27292adbb8b0b4015f3de71bb2df5172261c164b84a069ed4
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:e71a7520803d19a1528cdd40417c41c79e0f5bf5ddaec85cbe18989b884889ce
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:8506bbb35d1d304ff99afda17e3e5cc0f7784ca09ae8aa0ea6ee8de30d14ed8f
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:286146c65aeccb7fb671638558fd50228047c9babb9d674f12bc8bedf6e5d70c
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:f3f940885872b96e1d0f365a7ea20fb49df2b9643813321a0264f136fa1c5736
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:cc3b643dab010ad14133b77babd525198c511d78a6a2da1eb00b5c911ea2ea35
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:ca0b13fd538f425161a8c2497ebac5a857b965e6e4a4a3ecef92b16b1259dc38
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:cfd86ec0dbe2a698e9bc37a3a2bab4e32b46ef84359b19198c2e607d5e483afc
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:c116f20e8a9e56a49a3d3f4f0cc35aa43491c0b3f267a7545c6f58f597682a2a
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:23d06ea4a2c636addd3f18e415f5eda6c19c5e949c1c61343aa74980316857b2
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:c34fcc01e6113301ff60c8a8f569161d0e7589ca8452fab41e4cfb3d044864be
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:084f051778cc5879e23bf4003098efdc69c909640edfca7ef9e423d30f8229f7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.