[CLSA-2026:1792580147] nginx: Fix of CVE-2026-15176
Type:
security
Severity:
Critical
Release date:
2026-10-21 10:55:58 UTC
Description:
- CVE-2026-15176: reject URI to path mapping in ngx_http_map_uri_to_path() while a rewrite has changed the URI and no new location has been chosen yet, closing a window that mapped requests in an aliased location to an incorrect path
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:1d09bb0cce25e9e8f3efd4378e52971f124324ecdcf359d17f528224745659ec
  • nginx-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:d302c63ab06be9a229d3dfe2f31a39ba02f61320091c737653b384acadbbe00b
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els13.noarch.rpm
    sha:92fb2e9cbb8b1eb511c58365569d63edeb0a6aabffbe165903835a54678e568c
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els13.noarch.rpm
    sha:6c75aeb2485bf620aa6a28365ba422dd19bb56f2b92c26c2aa0f3660499fa454
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:e392bad2573eb0e08140a5a859856a154cfb4e1c8adb70989dae75c254867afe
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:e5967977c4dc5598ab93299f52608c2df0e6be3d353c6cf97a042291433403ef
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:0c2d6176f59887c58cc1b118903e6adf5fa10bee0e3e2f6144626981ee0b69e2
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:5b1b4db1d4fd2277c2fd2b25418b16ccb4915056000cf060671cd140c8e87676
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:10a3b02daa921cf06639127f7ea02066011dcfc91e041b567cd934e8bf722665
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:2269af39a0d65744a15df3ad9e4dc6393c0b2d5d753db2fd312102a52fcf4017
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:ec23fce05f2bb7fa59fbdb9daba97ca37d1da077c041ccd24cf48c33f0e4bb07
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:c5eaabe3c052b7e5f07818b19b013390d092812d3bdde157fdea0236bf74e381
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:d05a686910d65fe0909a53168e01490f02b19d165df24e184af0c39bc81b061c
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:f74a9f43c1d83eea0c513edefa6d81c7e1a7fe59c7c57e7c71b8bbb4007f8ef1
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:bf3a80b9a241e7bc1c529fa3a1df2dd71513d703de964c5df787cc3683a63ae1
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:ca6d16d807b10cec7cb9ab613f892c14b05e735e13105a5fb480b4d10f913e6a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.