Release date:
2026-10-23 15:11:53 UTC
Description:
* SECURITY UPDATE: buffer overflow in URI to path mapping with alias after
a rewrite
- debian/patches/CVE-2026-15176.patch: also reject URI to path mapping
in ngx_http_map_uri_to_path() when r->uri_changed is set, so a URI
rewritten inside an "alias" location can no longer be mapped while it
is shorter than the location prefix and underflow the computed path
length
- CVE-2026-15176
Updated packages:
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:f950f3f77bd172435aa019e5730849bda499674c
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:83502d7bd0bf3f5c1659a01c2e14786bc02bf5e6
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:4a8c2be2e8cf9addc22840b0577af8c3ff6dca61
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:10f71b523bd88d53a78241393d5ab795aab07b24
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:8717eb74f364fa848995e3ef574ec7617d991e8d
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:49345d9b74d63c37baf3e3545aac7f90df99c53f
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:80c9aeb81631f228274ae835f97592868afdfd96
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:aa963982b0b903cfcacf02ddd68f0f536ec4ecc1
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:8c6bd9e3849109b966c9ca9a5478b54477b37b30
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:079dfa28f3f226860c49a2edf6efafab3d0536a0
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:0beb84504cbf9e90d498bed1ae895fcca22fc917
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:02b5c0b4d76f35d5363bcc54225b9033004e8e49
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:80e4265c2d649219f0a5f8e97b51b41b2e83b38d
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:e920410e6ab5871a41e09323de5db5d54e6810cf
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:67edd389cc0f7536e8d814fd9d2af45b6b11abe0
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:d15babc48000d3bac641cfa86081b70088c2b724
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:b4b561e0c0d77304bd3ca7fb0d3144ab05ad6b68
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:b098992361cff116b9ae7a806260a95a0db2c1bb
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:3b78a765a6a878f2ee3524bd891d4988a43ec985
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:1e3e853eab25608d291a4075e3f9fc8d72027447
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:f0d5ced1c4038f9ba2117f6461cbd37c9156ae53
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:03fc4c3843f9b796013d16736b1fa496403ad108
-
nginx_1.18.0-6.1+deb11u8+tuxcare.els2_all.deb
sha:020b215672b4fa461ea66d4dff4be5ed2e2986d9
-
nginx-common_1.18.0-6.1+deb11u8+tuxcare.els2_all.deb
sha:c00f97bc199c0d2b450ae842341c072a4c8ca295
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:f42ebaa77390757d77b474a83dc5025761a5f2c4
-
nginx-doc_1.18.0-6.1+deb11u8+tuxcare.els2_all.deb
sha:a0a4febeaf96ed314584b22b64630faf29923194
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:b2cc1126cd9f9cb8f4b0c85b3fd8676711aff408
-
nginx-full_1.18.0-6.1+deb11u8+tuxcare.els2_all.deb
sha:c8c24af4acc0f323227860b3b472098fed110f84
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els2_amd64.deb
sha:f13b9a4ea31574e2b5dfabb24e84611ec369ae0c
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:6015ebb69cc2455251042dfbd4e6a91255d0fe11
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:1ddb25a45faa5e9378eb2e1546237b5b23937a67
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:b01e154f707a288c42436a8976ad2554dfd4b142
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:72341422180444de6cc4f0e368239652f3e69ee0
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:4465ce00c4e51d0a3c8be50fbd5b156711c5be56
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:5f71ee8528780a6453f580f2945fce2509b0d5aa
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:3e22690254b96785e25831bc5eb7909d4927e989
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:3c7b9394ed2d8f7e57d91ee6379e0335314eef5b
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:9ce4e19aa7bca6607e2c7eb69592d8bedd126b2f
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:d27ff0ed5e06a349266d310fbb6b8b78a9d00192
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:96932fcf2515619ce5829510b75fe112d2c02d70
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:9c3225612a6a3c6b0997b56c3f681f549fda279e
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:5e3c21758a3280ee9f9e734cfdddc6e768eda8d0
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:606f35340698bd0d336859c5ff8250cef8508b52
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:b74bb02582477301cf642095c14bdbed1292c5fc
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:09eeddabdabb67dc357e551fa5f1ef1e510ca3a7
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:8391246a5627553f5d79111be48aa4072da50e02
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:b0b88acee98a8cc981dc7e320cf0622278dac7d7
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:dcb054c1c2c446b4b8085cc5d36158ee4c7d2066
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:9b17316da6026d23b828c5d5c7b101bc8bfc749a
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:0075b4ebae7ce0a72d210df72cb7336a0747e053
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:f4886bf2acf23ca69f02f2ea1a37fff1457bce6f
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:1261435195d62f07f8701826b1c9aa3d78997583
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:bc3e830dcf61a379b38d53ef0f97f81a0c23e035
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els2_arm64.deb
sha:be2852c9beeb0b908e94e5cb1943360d20835cea
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:785e766f1a7843c07040a241d89c7b709f8e23df
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:d32299d7abefe34d7a2be0109528a33821d55361
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:5341645742fe03e8fe0ea3d0a8dbd5a41067b07b
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:68f239db0b5dec0e0e7327abf1500f281f8ddbbe
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:b73d0be138d2b2f104da49863e7e082aee707888
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:107097f332b8d02721ca7b59afc87c9a4cc557aa
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:86c066c46409bacb98faa94da8c0c7ea72421b25
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:1a0ec995e5b121885317c72f2538e5c830a895fb
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:2ad88e5ce8d24ceae294b9a05135df1d8f374fea
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:6db795bfc0a97cfeb7327f5c7ae0bf7e9ff943ad
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:1d62171508a6615242e77ea1912e93b800bf67fe
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:edcd3a5373d51009ff93628f5f2208c614a5a752
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:bbc28c4c1f3c00f4026be20745f805a692023475
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:327814cc310293dc780779422f7f9cd856870c3b
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:c337f0bd0081334bfe82ca0d2d488bb7e88d96dc
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:db5f36168a9b5d4de913ac0437d89fbf44197b70
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:149591c86e1a986ac99c157be190fc759a130b54
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:1e892d0dd5211fe88eabbd5e47a0de2b20bdb243
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:8501122c40843756096c74a2a789847a85b86888
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:62fd9f20908d1523715975ed1f590091a550f4f5
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:d22a5a9b3d6f34cc7a82de3ea7434e9c03366df9
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:555aa408123b3800de5927a831b0762ddc6e361d
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:589da35b976cc9815c5543a5b852460760c27bc1
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:26b81f5301005ab2b79643440b7b401bfffa372c
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els2_armel.deb
sha:00f4f0155c786f20224d9cd423f13939308e0ffd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
