Release date:
2026-10-26 10:45:49 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in the script engine via the
reserved memory area
- debian/patches/CVE-2026-93479.patch: stop counting the caller's
reserved bytes into the script length accumulator in
ngx_http_script_run() and ngx_stream_script_run(), so the engine's
buffer end no longer covers the reserved area and the recalculated
result length can no longer exceed the allocated buffer when
evaluating a document root or an access log format
- CVE-2026-93479
Updated packages:
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:b733b1cbb5085422008d044b9ae2b379e92e6d18
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:dc8701b79879c8c51a82a6b7bbde2004d681160a
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:c294c8d996cbbdddfc2da9e1741631d1844004a3
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:2b4a69f32b129e74a48f31ea198c60b00613fc33
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:dad3db1ed50ad20c89ffc55887572365f62a99c8
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:92ac4bd1d6122e028afb792710e49543d8c4b247
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:3c8d85596fb1366d1c58a649e8ee74f8471ecfc7
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:04cb8d20f0cd17fd14e8e46c92f448914a2ece99
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:33e7177b30e90224cf3cbc78eae0c70e5ffc8c7f
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:8673959dfaef0a42c4ec40bb0bd0e9d1495a5530
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:8f7ae65d43a9134db168faf2c72baa93ee53de04
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:a5cf6e9830e44f8b257b30c06c6d9f2a639f44ac
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:8addab196c3136dbd30153099e435494e795831f
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:f8a1535b143e44c6ff3d32302ac63efabf05deaa
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:071b932ff16d3c273d58492ec5e87ced75d7e45b
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:78f045b2670238cd2dea1ebb5bd197bc5a320b11
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:a9ee40bd78a62de7fefd20c31292e097ecd70d4e
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:c4acb051a2eeda3f53142a0b62c031d13d7f8c89
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:21c0bfea7b4e27a0b8e50c3b3449bd0be9c9a7a0
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:0c6e5e41c9e69fcfda5a72b269610075ce543004
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:5b61dcc3d4ad7a1d6dcda49e0eeaed161d4c84c7
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:1f004403ea858c79f76fcce3015cc662b24371fd
-
nginx_1.18.0-6.1+deb11u8+tuxcare.els3_all.deb
sha:5e55d3ce1d4efc640466f822d0348ad94fb3d7d5
-
nginx-common_1.18.0-6.1+deb11u8+tuxcare.els3_all.deb
sha:e71a91a07f9483605295e42104e31ee2bf5c4b28
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:dd69144e58136d0e63b9e0b3f806f3dcffa78573
-
nginx-doc_1.18.0-6.1+deb11u8+tuxcare.els3_all.deb
sha:2f5fbb99c87b919ad86cd99231d729efac9200fc
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:1dbe9fa0a62a05fb79ffa519b5e796b938602f0e
-
nginx-full_1.18.0-6.1+deb11u8+tuxcare.els3_all.deb
sha:c7fa0b05c6b1ed0c6cd2635d4498060571b7ef6f
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els3_amd64.deb
sha:b6d4208a341264fdcab1b2e44b3f3d0ba0353799
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:f4aaeb63d432b552d0bc3778471a8933bb878647
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:11f4e80a4cfbccbeee38fbee08584f60887246d2
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:cf0f2f48bff62ca56bb9decd18ad35cc3751eca0
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:06b46cfb60a1aec1a204f20c88d5795908da23f3
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:12aeb7b34885d3304d7e126855aac01be19ae907
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:8078d3453d23508d87705d0cba8b8e896d799869
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:db0876bd12171573f15bbc59b7dceadac481b77f
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:63447ac8b262a7020f1bfc80569d29bbe6b7a239
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:fded769fd06ca5fc974af5f6c55380a9edcd59f1
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:d746f3e83d6ea17d67c0e38aef1b2c6e178b5a75
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:9552c5ad2f78f96185cefcd0f1ef55c5e2afd4cc
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:7ba3a67c49c67e37e44a6787eaba323079cdb5e5
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:850d51d2b7023f4191276cd07987d9d399691c2a
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:884902cb5164f67e3a7c5ec4f3ade36266cd8cb2
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:486800d0c81484456e41c5ae20580404fcb41f24
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:1410c53b601758ac751f21eb35bdae64cccf39d8
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:786067b353d70acf3e4e2cefa37f2177c2ec18b6
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:313e310a6598b7fbe5be6e2940a7ec44499401e1
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:680505976ea2c7e8b36b051b70e7cfc84a86cb4e
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:bde235a5e7ca0729e9ba466940f1d7372bec9f58
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:79afa586c613532deb3f38232669df43f43616d0
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:231e4ea1426e2cf4f1a88d79167bbb1a4f11bdd5
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:94e60d1dee6a2051e02064cb17c873d40589dda2
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:a16d374dbe063ba6392df8f5c610e6898a036bbf
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els3_arm64.deb
sha:c4aa2e90a5f5fad6522d76eb3f765e8fa0252d8f
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:ff5f8307775ccb682ab9d163db41ea2701cf7c20
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:f1bf5d03f433ba40ca355cca79ff2cfae94bbef7
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:3080245357575f1e848af9295401c1ee9effb871
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:cce6540c542d057afa830abf1f4cea361e4b340b
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:7e57fd7164c62e08f1922bfb9d8f503e62d5a417
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:a483622c1800add69851f94a2739984f01559823
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:f6e529666828d40a801590ed83641500614a6e2c
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:b19d012f77a9520c15d6ddcf23b8142998eb2f2a
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:61be46eda9c2c7f257f059be8b2934fd9c5072a8
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:c36ac84d77922f37c94e0a16672c14f068562545
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:690897049925e73c625b6a0f2b84bcacdf450eff
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:e01e5e2abcdeb0c04db6a30558f0e4ff95d4c1d8
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:dbb030b1a3241ab981fc21866dcab63882b3ecb7
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:058e24a3b6091e672dffac8656cbac6ef98bbd5f
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:24892d3626d2e225518e9b0c4d38ab9222e15900
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:4d46c0c9bd439438820be8be78c58858d127b443
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:11991b0e61d0507324fdbabf4d765f92c16298c5
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:e36182e586c6fcdcb04a45d7e8876c1adb668228
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:0f60755a2f2ad6e36227a4898c92dcc379f6b92f
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:2387ce2c96ecdcb5f5c916e9ac60d5e02a83484c
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:b018052c004f28adfe7cfa0d404b97e38a2a6db6
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:3a3770d9cfeff1d384a1146a845cbe5582f781db
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:111c8a245c0193a6bfadfb50ac424c24b90bb555
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:25e2910f283b0db54587dc8a842993fb44e2d153
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els3_armel.deb
sha:c47fd81147d6c0e268121a5f8b41430b38497f47
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
