[CLSA-2026:1792698028] nginx: Fix of CVE-2026-97205
Type:
security
Severity:
Critical
Release date:
2026-10-22 19:40:39 UTC
Description:
- CVE-2026-97205: limit pending asynchronous operations per request to NGX_HTTP_MAX_BLOCKED so the 8-bit r->main->blocked counter cannot wrap
CVEs fixed:
Updated packages:
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:7e93def6dd8bc33ce584930ba70381a085c2bc48c30766ad6d52e5255fcad7ba
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:f95b8fee6dc773323a2bbcfebc0dc131b38c9927cbae2e46178268285c9b0886
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:1bb99b1dc01f86cd463afea629b09b07ad20cc1a2e404b29cf1f5780ec6c5d25
  • nginx-all-modules-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.noarch.rpm
    sha:e899e276f1c6908af7872c31338e345e4584f592f7630e5aeea543ea12a3cb4b
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:d7e2bf01d146af63eb3aba4a3c8e2cefd1aa3dce9f54dc7e859f0d38336eef9e
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:9bc226170c23037dd1bfc00a9126a5d8071e167de2e7a6b9b9d9ef9eb4e80ef7
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:afd5378fc4bdca063befcc44dd4c705274acca7c3c25a89298cb166eec9a2067
  • nginx-filesystem-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.noarch.rpm
    sha:4ecf33738064d745ef7c8a3d8377fef7db25f261a1a69290ba722ca4dfbfe668
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:d6fa4c9496355f7a33335f2a8b938e1ef4f68dfa4bcba95e201d8163e12b38d9
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:867b247df84117b64429724398a0d4232595d115b92e5aca98baac1f9f408dde
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:f5534a9542883030acd2242e978341c5c1130a90975e83978d73e7c79f2323b8
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:1de3a6641df8dfc2182a18506268c0b684f2f1807b14caaf5593dda6de787800
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:3751d09ed945857f97be7697736dfa10fc5bda5f468ba5a8da18d9fcaef8703d
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:28792903a74fe3c9499af3e6898fee2c1188ecf84f27c4771f3a295f0ff84812
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:c770eba96554e22926f3d7803520cf1874cffbb2a45573c995fc31ab31a67cab
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:1a0203d924e1507d0a413ceb09f2cf59adfdc71bacdac91e3398bd9d87b76497
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:0b697bb0f430b490398f0881df32c9e5a584bde343c3e00a200c76886d74408a
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:24bf0b3819c259c46e172bf63d6ff73ac2ac9031dca1416f48b1a9039edae19d
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:5513f39c1aeb32f29b6dd497bbc7dfcb54d39138130b04799b894b67cead2542
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:37e94e4252e00cb24031b6d6589fc34a3f6c558a4274c2ced15c1a64575e4b52
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:03ef257483000207cceabc676817833a86000b863ff2ca2101da4482e11a5dbe
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:0d1a805dbeda3f8126ab259f65f8f68bd96f6d701a97cfdfd5c655c56b17230b
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:135384bc6bce16b643d83712647cc7f6a47f912fff1107aaf31782a046637dad
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm
    sha:1f888ce0bc5b6dbb0903135a1ff72b2f32f9db07f7bb3ded4dce32ebed659b67
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm
    sha:5156eb31b3ed75cc7b0a5b8d078f3add96fe332eaf037833b53d1fdfead529c4
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm
    sha:5ba64838b59a6cb11456047bf0b09ee9f848c5c9bda3b40299247e30c78b29d1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.