[CLSA-2026:1792571502] nginx: Fix of CVE-2026-97205
Type:
security
Severity:
Critical
Release date:
2026-10-21 08:31:53 UTC
Description:
- CVE-2026-97205: limit the number of pending operations per request so that the 8-bit r->main->blocked counter cannot overflow
CVEs fixed:
Updated packages:
  • nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:a98d9d7a16f7ef115d19f23ba349124ffd20630373b26837ef51738a6e340f0b
  • nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:7c6d94ba77a97f5d6a863a5835e17571bf74bbde735a5c358623d045c0ef66d3
  • nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:9ccd28759dd8d571b5c9e144ba2cf97d701bea02ccc0f2de2f6f3d116a285dff
  • nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.noarch.rpm
    sha:a8c93e62408e5ecaf1709085bf11a2fae512e7f6b3e10ed81d3d37e761e79edc
  • nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:96149afb7f536bfc8f55c521e031e23fa14a5fa195af4ab058f95ef9adbaeafe
  • nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:9a8b6c5431e3a6700c14bd35acd5b0dcf6dff39ab6f6437353996fa3c4d3c1f4
  • nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:90e2d9fb349832ffdc05765e68195b25058b0f99b9fdbb87a8c569217d4b3d9c
  • nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.noarch.rpm
    sha:0417e11902a074044a6d652bdfd5d75dc9953d51b2ae9688b0f61edb9f746243
  • nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:a4e2914d7c5851543371158e2e32db36c0a17de9f8a635b3da62e6210c39d542
  • nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:aef6f1301e169db4d8436c6bda49677fd6d7f082d8a5a61492d020969d1f1aa7
  • nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:c042c6c54db4955daae3a37857168f5e5ef3914f823a681560a4658d8138de7a
  • nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:f216e9315f744429301d6d4fc579b96bf68cc50be02a3eaaa4485cdd284e2592
  • nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:32cb6f42d6b652a9c02b6b44ed2a13639e8d96a75a8ce06a0d1f3b8ffede633d
  • nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:17a52806d5129a62d13b680173365a8ed787d64dcff8b753f583e3d5ecd34017
  • nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:1360cbcbe1d1646d76abfdb42ab38fba8dd9f003863b183642a6745e53311203
  • nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:3c409dacf0693b62d25aed15389de14def3eaed2b5e6e346ec6a082431f7440d
  • nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:f9a2798caff13dbf622cbc45ba1a401fb1242b6ee15501e30b07e67726596b85
  • nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:07b7b7561c3b3715166c36d9864cfb3a0008b22484c2e3e473682f8560932eff
  • nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:beb8b1145e580b95b0d553f3d3f65dec2de0fb317e3cc6fe765c21ad546f90b6
  • nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:559b9c1fc10e6e59672aa04e95d64cc8612aa001c0f02aea7d42ce7409231fdf
  • nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:f56379e25b68637b487f5f0ab43b4d59837d17f2ccd130557434b94fd5a29702
  • nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:6445705837e3484bd445e6c27d13c8851ee5f18f029161633fd1e3b2ab140ecb
  • nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:3e6fb3132f115e0285ef62cffaaaa3be52163b3acc10c3340b1e57814919888d
  • nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.aarch64.rpm
    sha:249b54ec198dd82875233c7a63610baf55216460484eaf66f3a633ad1a5d28b4
  • nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.i686.rpm
    sha:d56de30e2d1f5983ee1e1aa0589d6c6ff17217c0afd5bc0796ba9955cbe41c59
  • nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els16.x86_64.rpm
    sha:2cc462fed2746edee1211145a770a6f3eb91ac8c2c1c941dd6f9f0fb34495c82
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.