[CLSA-2026:1792146840] nginx: Fix of CVE-2026-15176
Type:
security
Severity:
Critical
Release date:
2026-10-16 10:34:11 UTC
Description:
- CVE-2026-15176: fix heap buffer overflow in ngx_http_map_uri_to_path() when a location using "alias" maps a URI changed by "rewrite" before a new location is selected; reject the mapping while r->uri_changed is set
CVEs fixed:
Updated packages:
  • nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:943198270dbd36b814e7d71c5d3cd21739cd0340caf110c9db8571832330b9dd
  • nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:8209ec02eca6f9230788ca56219af5c3b68021e602afdc94b32fcaf9aff9f3e7
  • nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:021b344b06b7f8f4023885c8b352535b3c7253a6d567c8bb5943c670803c6511
  • nginx-all-modules-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.noarch.rpm
    sha:ae2ac0163bde77132c94672169fbe93a9cd59e81106403620ba5c2a2d630f2c6
  • nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:5b7924cbc0ad29b787a0eed14ad0aa0853dc0d7fee90415ad3f0a916b24ff795
  • nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:db68cacbe240b5b4943fa057540bd884d3cd6f2ed4e46c5e333404ad50385fcd
  • nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:8621181a3a91929b559316c7729c5d5086ba89ee6e10e937cfad459005760b94
  • nginx-filesystem-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.noarch.rpm
    sha:90d485a796bf50073d534880369bffdcf8dcf25f063600b8dd9503bc509ca9dd
  • nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:86b111a70c5cc2f433c88ce35624806fee16c16a2f52382786a17671ae280a1f
  • nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:d74f96d38ff24bb3e72ceb3065f34224278635983251ada6e398d81dac6a963a
  • nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:c41c8a675d46f69ba1225b1cd6e84e9d7ca556e96e0996591106393d469ff262
  • nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:be8404bea39d5c612f86722221a8cfb86bd927a9601a12f5fea985b3837f2557
  • nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:eb6e6c4582299082a0a0a1fe23f99460b9644eae481a45ac0fae7d46eea2c738
  • nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:91e431b0dc47b9ec11ccb2b879a2c9291ace0ff9a9ab6d459b6f576a0e232fb8
  • nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:4b54cbe734b06e3135fc04f892d545caf4654c5aeb1d841695d865e1eb553d29
  • nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:a079232669ed5d0324f2d6087bee5f1de55b66c71cb280ed8fde7179e063ef1d
  • nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:61758685e50d71971c034b6c825accf4d6e57e50857b20880d1eff9aaab17779
  • nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:62ef4e83b2b429c748c34ec122fb83138eba976ebbe4c5a1bb3bd2e9c67fe627
  • nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:eb7ee8303f98d5707778c31dc8827f03b69085620a435b2ed9ef97295250f6de
  • nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:5fbe103a994542d1df095cbb54c1dd986ab8b3c1dcde13f7fed2779690bc08d9
  • nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:69c6701502adb9f57d129c0170f26faaa046ec79737ef6ac9974413de206e8b5
  • nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:e5436a716984b3dd1b4fe0f67721388b64b7f1955b2fa617ab504ed71f4bd5ba
  • nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:a22f40d179ee42b2a23dd560cc9c00de0e786b9011afba3dbaa2c32246c52868
  • nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.aarch64.rpm
    sha:88d62792024113f1a1fea86db61f9fb2a89fd5aca674f269371594172729b398
  • nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.i686.rpm
    sha:5a301b6fe7cb9216bf7f3e509792ec3e451884d56f8b90e58b44eb33513035de
  • nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els12.x86_64.rpm
    sha:ae14db48cc02069a8da0f1aa48ebf488d6d065bdb71dee13715a786a0b89c93d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.