[CLSA-2026:1792589925] nginx: Fix of CVE-2026-97205
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:13:50 UTC
Description:
- CVE-2026-97205: limit pending asynchronous operations per request to NGX_HTTP_MAX_BLOCKED so the 8-bit r->main->blocked counter cannot wrap
CVEs fixed:
Updated packages:
  • nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:c597d186bc4477b0ac7d77883364b3115e74bb6b7cd6aa78680ed9a78f8e9ecf
  • nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:e3b96f1a1a2259e7ee765dad11e29824642fdcadc43f90f96c67f64a336b5eae
  • nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:13a0d02d282ddc7780f1a91741b1497eb56dc1aed18e3c33b47ac91664af4e66
  • nginx-all-modules-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.noarch.rpm
    sha:9ba7bcfe10d8de9fe09d868557a1962fac85c6f570ea317bc58b4e42944995f0
  • nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:7f9cad8b5f42528b2b783e98495b684f2dfe5e53a6c270333dfef4937dd669cc
  • nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:3ef9a5a7918a688f4c33feed036d11596efdc0926ac398dc579808801e0d2565
  • nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:d6cda172b3717ece7fdf2763d8e9ec3a300045f047913a2f08acf5915f6026e3
  • nginx-filesystem-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.noarch.rpm
    sha:a1470d6bd29850d7105ac132480b45bb641cb7cabaa56dcd26fa4ae684b4dda7
  • nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:14d301e47a0588e100dc0d47d7e9c3270f9aa3be122a6f777b9bbe3dd57ac52b
  • nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:9349771488fed4c8b8141b13d6bc411a1b6ad395ebd267a77be5848e2c0861be
  • nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:b2fa964bd6ab6fb76babe3fda2157af88dc557c8d004f8f514fd4b610d545d81
  • nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:ebc25c9fc0b2a2486ab52cab3749667d6215895172900917deb51c852bc89b8e
  • nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:4f9f84434a647882c70316910327eae0493c3d0e8641c108c6ce53a98481e2c0
  • nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:f90c7058341c8b7c51ea738f88eb8077ab09898e78f823f45cc7a9ee4e7b28c3
  • nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:6c02fbcb9dec6f3a49fe92a72328442af9afcc57de7c836b3a70b2aef60eed9a
  • nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:f49ca52181e3373acd2f86110d1ebef3883e5c0d822d1b4e8108f0b08641d6e2
  • nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:bf67ef0398cfff7729c82f5fe23bb7518684d97354627bb8f3322753bd39528d
  • nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:44c53cb0b080b319e495a815a2363eba88e26fdbf83819aec442164f31a5cec5
  • nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:2e82d42dacea0c288afa32fcb06d372140446506b397dd0088ec9f419a7c814d
  • nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:4c1c56cd7bd4fe65dcdd63ec38191d6cf5cb6f337ebd632c96ab66358da88e99
  • nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:6626e6f07694be6eeab253b8d6c4903843218a0bbae7f02770fb9a89818f760c
  • nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:8d35da584493361c3715e33ce5b10ec62e96f078e7def79a76db6cf4c46a4b07
  • nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:922a1c0c864ee4ba0540ccc482d4ac1bfefafd1215591fcb3225ff0770a76ba5
  • nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.aarch64.rpm
    sha:842fe6d9749895078bd3953e621785621a1e7305d5309b77d9f16f126fbd89f6
  • nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.i686.rpm
    sha:d35e177407b93342350a24d12e1b12660739a514114c3ba4c3965ae4e6922892
  • nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els13.x86_64.rpm
    sha:b45a83b55c32de873b1d20070b1cdcc5d9c2adbfd99ba8f8a9a598c554245210
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.