[CLSA-2026:1792768371] nginx: Fix of CVE-2026-56434
Type:
security
Severity:
Important
Release date:
2026-10-23 15:13:02 UTC
Description:
- CVE-2026-56434: fix use-after-free in ngx_http_ssi_module by skipping a subrequest post when the request is already posted and resetting r->write_event_handler during subrequest finalization
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:d7f97031b339281cdb0a1773edfc72575282b16cf4cafdd173376d9567665cdf
  • nginx-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:879e5e222c2e34c707fd85eb2d972a82f9528f52a507d7a6c04114d71858685b
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:2a7155da59f707f9cfd822fc18d99c799ef57334bef161677391cfbbb73ec72d
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:f178cb90eab0239b08a9787911113bf6b6acd0f1de1660f07ac5d18136c67a2e
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:cc2a00f9f4fda4e697635136d926b1e2a5425e95cf281816ea5f10c012370f18
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:484c5a109ac5e97439e73391e842da948e79e5d67c5eaae3063008119e5cf8ff
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:f58098ba8c87042cd35236354518fab1ca493e34a39bddc0a64f43e45d1444c9
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:02b4fd9ddac39d3f7f2c393f695275c9bcd8c1521e37a0f042fcf5af5ae27a7a
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:fe46854ae5c352dc9c4edf2361c72b1cf9b5d25343ca2cfbfd5d7a5bf6fe080f
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:91387e4f825e8c8db45d46c31e643e57bb854fe222f3943b6ce6c44c049c5f79
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:76b391f2a40d6883f46bea503d0af85710680f793a9207b2c4aacb5a084ba92a
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:9e8ee7f693590ba7c005c457245ce3949307558c005cdd48876f6758176bca41
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:2ca7a6a426d95a60af44e22985c8bf55b5f788858382aee1b2c02f7d90a8a2c5
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:abd3df4cbcbada75f9c578c754d0e3ecc06b7e57bf9662872614c772d644c4e0
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:2763e474405ba21d1dd4a77a5a491b69cd50b08f24240bcc29b97431bd9084da
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:e4057f34e5337aecfc62d0c891a578ed173674856f9f4a5d8c17ce8f281b2104
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.