[CLSA-2026:1792155817] nginx: Fix of CVE-2026-15176
Type:
security
Severity:
Critical
Release date:
2026-10-16 13:03:49 UTC
Description:
- CVE-2026-15176: reject alias URI to path mapping in ngx_http_map_uri_to_path() after rewrite changed the URI
CVEs fixed:
Updated packages:
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:9705c63f18e335fe3c3f6792691c497ee453d264ec0fd4b35ee6bb7267cea819
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:ecfbed4437893793f36baa52dca8c5045cad8c0f959ee16c6b7da236af9df582
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:3fd82ba7854ebc91f1936bd2ac8c54d3fc5db89b3d6b1eba60340ef116acde12
  • nginx-all-modules-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.noarch.rpm
    sha:e93a61b257ce05195cbdd1461a38f43bddcabab1903166940d39916d48489bd7
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:b37f89c9339697b2aaea3cd81997edcbe6c2c1803e6398df4658df49293fb0b0
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:b5a3969f9ee8e3945d96da411e5e239d7794fa974c73782661e8a8f3c3ed0bec
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:5f545981b46285618488c47942b8c213514250ce121b11d63685cd0f0ec4b6e7
  • nginx-filesystem-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.noarch.rpm
    sha:1171efe5d8eaef44414fc553accab1791934dba6de9a267b20e0379b1f5f8c95
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:73f3161e69b7aa36621e18b254a75257c69c76e57644bfb649f193427ca4c8ae
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:015dcc085b375a82bc3c3d2e9d9f3a1cea1e4153ae29504f385fff95ea48ff85
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:05f830ce337ec236040ebd36c348254fd8bc71e68b645ba0167c0c3a41b91ad1
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:321ce717eb92c51e6079970a4de63a94bcb14e031a2bfbc0ab32d34667c5534f
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:23674e1e4017a2b785759a421847d40811ae80ef92a7967e63102765920eca22
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:b3a85eee5701f5e8b136834c9abcd75206a6de1a2e8abc16123ace6b5d610e6d
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:f8a6c6b279ae59b78fd2e954de81a53e8e303363b815cabb59c4c3f171171ffa
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:90d5eb179b489ea3212aa0d84a33184d217a44ac5db508f71b318fa32c174303
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:c9234710d405b008c0cef39e8c4df20cbfde6a5def293632c5174d605186c6d6
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:b6b0223cbf6758b0a1d2787c0c04e4eb64b5df62fc58e27f86d6461434c92581
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:d9512b052b79a88b01269d5eb37c04b3c98c1a5b4ab714cdca910b6b6ae02349
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:e7efa42924e1748e16b5036de8532082bd26e0724f3ac716e1413f939f55b523
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:0c54ceff3bbc0604f1ba6d4feece73b3345bc227e6d959d1cfa4b854924cc055
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:2d1a726854702e3a54d0f36d58d2913fb765c8b9a7e0bffaf7f91da104163aac
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:e6f16d1f641d8e1d652417a4395690cecc3a291c87eed036cf6e22cad5fa6794
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm
    sha:15729766746d47781d7b881f53ec4e20ce0a082679b771465cd9d8844c8c17c5
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm
    sha:8e47d55ac1b8a489e37e38462652c170d8e280ae8e4efd5a20efdbf57c8766cb
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm
    sha:4f98aeff0b7933c8d6b420e63bdaa63a613ce64be1d8daa3349233d03367c768
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.