[CLSA-2026:1791474754] nginx: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-09 06:38:03 UTC
Description:
- CVE-2025-53859: buffer over-read in mail plain/login/cram-md5 auth handlers - CVE-2026-28753: auth_http/XCLIENT injection via a resolved client host name - CVE-2026-40701: use-after-free in ngx_ssl_ocsp_resolve_handler() - CVE-2026-42934: buffer over-read in recode_from_utf8() on split sequences - CVE-2026-42946: buffer over-read in scgi/uwsgi status line fallback parsing - CVE-2026-48142: buffer over-read in recode_from_utf8() on invalid sequences
CVEs fixed:
Updated packages:
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:8e47432ba4811508cd8288ebf594739e1bb29c01c4661a63b6673e4e3427931e
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:97db864713ce65262afe46097896be204f056471e3578e03114181779d847dd8
  • nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:d53403c3faf6d5c9fba23ceaeb93e1a691fe55a1f4064d486619f23d850c7b17
  • nginx-all-modules-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.noarch.rpm
    sha:835497e2d30dafe9cc8fd0a96dfb2851da669c097a27e25ce782f1bd1fc7318b
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:65e203a25eb3b31979e892b1c1257c5a4188cbf68d4a7e49a43018de18ff2586
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:667bab43c2f2d54d9e73c076c88eaeca7867f85d04f1984163ddcd92dfa92845
  • nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:37876a0d48855d5f9e89b19af142dc5138227735f30cf96f7babafb3dc713dcb
  • nginx-filesystem-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.noarch.rpm
    sha:b389fc9e73468f1570374ffb3538eed3aa77efe8f9b68ac844f305a1ab1a7957
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:9fa19aa3f30d227fa5fc6d8605d603b9ab0c30b7ac38b0fd17c60382142a68d7
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:c371709ce3c0b9227daff4341949f95e8dfaad0a81a10fad8e0da8d0ae34c079
  • nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:c7ff6ee7d80ba08bfa7fd1d663e497f52d8dfe6a2e915840f6f59e5687dfb978
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:d28ae864700664609287ef06298c1c0a443779f62ff8b98068c26b3be31dfc96
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:66180386565b53aedc00e965be04a216d78a203dbd6938912d85cbe5325aa6a3
  • nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:a7af9dab983d6809a1bddae3db3982a9dbd9c51b93a7947845414b93de1b8ed5
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:0972135f14447dd1629f0ef4ff18f9aa5161e4058a2765d31a0ee4cc26bede62
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:e2e78f0bbb0bf828da59355f243f2cbfe37da09b34dc1790ada44eaa2a27530e
  • nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:4a1977e257b96212fdec9821a58842cc99203bab82cb551a532ce882fb4dc7a5
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:cb673ebe156503b37f069f074540425b0e614a67a3602633860838eb1ed61ce5
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:52a3a71928695e667b125e657c16f8774d4e5cca0ba486fd88d83c22280bea7d
  • nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:668f74b5a07cbfd81615d89be74da1c7ac410f16603001f6f620f22a5972d999
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:18444ac6f8a9b24cb2888d425650696208ed09a30608041ef808c28bc577ce0f
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:d1768477bd0857bdd9445638cfd81e3b4c87ea193c52f5ced8c6b8892e60a3c6
  • nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:6a6965d5d59e320de369a5998bfab734732c368aad1fba422e4bd34f00bec469
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm
    sha:f7650cd75dbc3d42fa99fbf24110e920e7c558f3232613618cf6b063fc48934f
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm
    sha:e93514eeb722af48efa179944fcd2c7815ed0dc09f6489b848f2976699b94b3b
  • nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm
    sha:868363449353c3ec0c6f9228252a09841f439153dedbe55784d0f3bf8c0fb4b2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.