[CLSA-2026:1788337827] nginx: Fix of CVE-2026-56434
Type:
security
Severity:
Important
Release date:
2026-09-02 08:30:38 UTC
Description:
- CVE-2026-56434: avoid duplicate subrequest finalization to prevent a use-after-free in the SSI filter during unbuffered proxying
CVEs fixed:
Updated packages:
  • nginx-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.x86_64.rpm
    sha:21e78d0d557895ef81d64236c3928416af329cbea398876de161a13548815e41
  • nginx-all-modules-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.noarch.rpm
    sha:0be3c4acc0cb56ec23d36c26695ae05b9088f06ba557e4305c30480a0f6881bc
  • nginx-filesystem-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.noarch.rpm
    sha:357f6c903252526cc7aa00331059624430f0ce9e5ba777db4ada1c2fadc26c5e
  • nginx-mod-http-image-filter-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.x86_64.rpm
    sha:5cddae3d8ac09eccfa72cea991b5ecd50d51d127fa298e1ad2081f6797a93385
  • nginx-mod-http-perl-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.x86_64.rpm
    sha:7b737a33685110d56454a76fa495f94587dc8a618261f14d99c7c1234bf9a97f
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.x86_64.rpm
    sha:b499a78d82e02bb5b38ba2e6ce7fbb8bcfbd9b19eadb9576032f8e6314580da5
  • nginx-mod-mail-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.x86_64.rpm
    sha:e548589e5c3ae00c625e18164461a37bc5c548be15a5b3eca18b6829779aea2d
  • nginx-mod-stream-1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15.x86_64.rpm
    sha:c9d73178c685fff759cf3aef22e3065329a3dbefa3d11fd2aba2148840b95c76
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.