[CLSA-2026:1792579760] nginx: Fix of CVE-2026-15176
Type:
security
Severity:
Critical
Release date:
2026-10-21 10:49:31 UTC
Description:
- CVE-2026-15176: reject URI to path mapping in ngx_http_map_uri_to_path() while a rewrite has changed the URI and no new location has been chosen yet, closing a window that mapped requests in an aliased location to an incorrect path
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:36281350ae73101437299d6b1bb3c7bc6a9167c32592ebfe947b14ad1fa29944
  • nginx-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:598d363d246d122b003e2c22c2f8a7ce25126962966429e72661bd0524b57ca3
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els13.noarch.rpm
    sha:e99ebf0b106d1fcc84324ac50e2bf0a2b55847a75b2e8292a305bd6943c68f08
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els13.noarch.rpm
    sha:f895aa9e8be1a7655e34cc2003c18894f967b81dc42bc040eca1d8da299095c0
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:08fe5a3dfec481c970381259f98c8ecc8eb68f36aaa0cfbbaffff2ff9c02b9c7
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:e2032e3fd5e68f9c3f0512f08a907ef663bd176627e66680ff5470aa3b48617e
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:d99bf87bfc4dff38919c8d41625adc9e132105f855578b0806257b8af4da7fb4
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:4774f81d652ccb22260ee4efe3a69f1a1fe8d26de6de2501f22089fe466d9d9c
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:2b5d6e0645c25123617f153846e5fa574ae667012d3ff4d374fd539fff7f37de
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:86260275c54216b6816598271bc0c3791f5203e511c5d9cf40542f2f5ec6932d
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:f3d9b685c1504b713701063e0b30ef47679b9c576f9f58192e71baa15a10b6d5
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:bf1fe479aa2bda3f45eb9382e3af0ce530eb91285473e0337654b257b4989738
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:9d7afd1af6fb0170f12aa9f35b0673456bbcfc8a251c2f707df6f94fcadb172b
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:dae46a6468ddb192cdf1d38b50d78877ab1f51b64c7fbbbe466b5bc3668e84af
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:eceeeb3cb13e751ef3d81146341d6870348655266e6d09f5b32242ce475689db
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:d483502ba1dfb7a8d638a94d45967330f017cebf10175b4d27d9071b607ce945
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.