[CLSA-2026:1779892931] nginx: Fix of CVE-2026-42945
Type:
security
Severity:
Important
Release date:
2026-05-27 14:42:16 UTC
Description:
- CVE-2026-42945: fix heap buffer overrun in ngx_http_rewrite_module when rewrite is followed by set/if/rewrite with unnamed PCRE captures
Updated packages:
  • nginx-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.x86_64.rpm
    sha:a0e44f250664e1472124fc9d311568f4e51b4f8f5d83337266808c0f62a20991
  • nginx-all-modules-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.noarch.rpm
    sha:4379899b2a709cd219921b0753d4bdea1ca47e64bad4731cded592757cd2f9f4
  • nginx-filesystem-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.noarch.rpm
    sha:e0a46c5d0000d7b38d64dd8b9668ce7ad99b728c273e896101c7859eac4fe3e7
  • nginx-mod-http-image-filter-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.x86_64.rpm
    sha:09cdbc531cdf598e4147d2b904525ae303374a031e00568abc815e39d93e79ce
  • nginx-mod-http-perl-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.x86_64.rpm
    sha:d075f86f89a9c0bfab925aae23e2ffecdafcc6e4874dfdea04e85e05128ff47b
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.x86_64.rpm
    sha:554fe53f7aa3756ccf0f3fd990976e70d64d936d83621c2ccd1ede47764d9f43
  • nginx-mod-mail-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.x86_64.rpm
    sha:8a92fb431b8115a530bae6db3371ca250d4fc3dcbcade40ca5f457133da21852
  • nginx-mod-stream-1.14.1-9.module_el8+2413+5da981b3.tuxcare.els8.x86_64.rpm
    sha:1a30024e78b87f1fa467e3396077971a49770569d0b0bb071f10ba1b4d96c6d4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.