Release date:
2026-09-02 16:12:42 UTC
Description:
- CVE-2026-56434: fix use-after-free from duplicate subrequest finalization;
ngx_http_post_request() now skips a request that is already posted, and
ngx_http_finalize_request() resets r->write_event_handler to a no-op
handler during active subrequest finalization
- CVE-2026-60005: fix uninitialized memory read via stale regex captures in
slice/background-update subrequests; ngx_http_regex_exec() now resets
r->ncaptures when reallocating the captures array after a failed match
Updated packages:
-
nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:f1f1f4d497c9494be3dd014aef179888c2dd024e0e6b75febb167927bbfac4b4
-
nginx-all-modules-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.noarch.rpm
sha:b1e96ce3434836b7f162e35741e07615c14773864c6a4772f0e6cb6123021611
-
nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:c2ea4ec8a9ea9640d1a6b9c2cb16d56b223b5d71b9a4d19d99ee6fa9b044598f
-
nginx-filesystem-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.noarch.rpm
sha:ebca961b742516ce49f9170bea6373cf5778780695b866c31ea4bf73cb1f9ec2
-
nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:bea170bb9a395cce3a5ccb41a04535fb77fcb2601f4028bc5d78a30a87a3f6cd
-
nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:bd9f887fc676b22f5191be315e24e382bd061f0d0a136658cdc7087f49c706e2
-
nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:9ca1bcf33991274fd3a77c7300629697ca3880e0b9b1fc1a626dd7183a6b7744
-
nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:75489920457f537896f4329d76a860268d5e9af65e61f1860c7ff952cf0fb557
-
nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:6900d5a5c3aaba9d6422f969e62e7eef6032f58daa559a562e451be8c5db86e5
-
nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els11.x86_64.rpm
sha:b4d745fdbd5d3753670bd1a65a190e2514f3a71aa99df14bae20554614eee284
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
