[CLSA-2026:1793187891] Fix CVE(s): CVE-2026-93479
Type:
security
Severity:
Critical
Release date:
2026-10-28 11:45:02 UTC
Description:
* SECURITY UPDATE: buffer overflow in ngx_http_script_run() and ngx_stream_script_run() when script output spills into the space the caller reserved - debian/patches/CVE-2026-93479.patch: start the length pass at zero and add the reserved size to both the buffer allocation and the result length, so a copy code that writes into the reserved area can no longer make the recalculated string length exceed the allocated buffer - CVE-2026-93479
CVEs fixed:
Updated packages:
  • libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:cf468de96612a4903d88792010502cae9f4e44ca
  • libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:a039999d3170c86e045ae9567c63c7358503b20d
  • libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:de3908e335b27b2649fddf1360b6f7f94531262a
  • libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:f5be336b2d500b9ce7d50080f87d006046362a84
  • libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:caae4ae23812ff8212215c20e4e5c368b4fcbd2b
  • libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:202d2cbb0aeeb516964a51b260da5c08f0773cac
  • libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:f9d2c210b8ac7f30a410b16dbd022247676b78fd
  • libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:3dd27da2832baac6c64c49afd55cec12823c6260
  • libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:3e5e02965055895b8bd9c9cd4113721a615ee69a
  • libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:053264df7479dd130fd833ac650aadfbb792c34f
  • libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:1e62e936f319077e4fbc851f3f4aa2fe1c2b29a8
  • libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:d15cbe6dd95b17bd6a9da8472f066df759f8c950
  • libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:83ff0eaf84c5eef18e371196b74cdbeec08a94a1
  • libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:48944339e824c05b1971fc26d3b413aef0dd958a
  • libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:2f37f3c1f88103224f240d5d386791480bc78422
  • libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:d2872479997d5e95963221dbb38e1c55bb97421a
  • libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:2412dbfa21f491a6dd58e8b14908c030ad5f0dc4
  • libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:aab5cfc42852f115ce9e9b81002f694f9aa14103
  • libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:f454a9804a7759b4ad00eb02e0591f1e579251e3
  • nginx_1.14.2-2+deb10u5+tuxcare.els11_all.deb
    sha:84041c257e612a2513d27e0b5a2a1b8a743a4649
  • nginx-common_1.14.2-2+deb10u5+tuxcare.els11_all.deb
    sha:d4d428e30db6249b40502ffe3c631894e2a0a46a
  • nginx-doc_1.14.2-2+deb10u5+tuxcare.els11_all.deb
    sha:73130daa986f70963dcd2716d1b31ab0cfa3f843
  • nginx-extras_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:300bc9ccd2cf448bc2761cc0d9895a60fecc7bfa
  • nginx-full_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:ff5e9b3e312ba4d4d8b9b5cd834c51fe9402c7d2
  • nginx-light_1.14.2-2+deb10u5+tuxcare.els11_amd64.deb
    sha:3c3a14f2627f9935ad7cd59155dd2c4125f520ef
  • libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:5cf47088816e76031b74c6223d0f22fb40acfcdb
  • libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:d0f9d65577e5b17b25077e8625e43cd3df52ee9b
  • libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:3d16b1d6c920a8ceaa27167ca27b2ae5ea93ca3c
  • libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:98d1b4db3305b26b9f0f5c462a0820c09abfe119
  • libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:16994d51223c5d34caafefa9f840aa1bffe94324
  • libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:06520bd7c5557395b442d6a4a2f5e8a462587d30
  • libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:bc309724f49a1a5d417ffbbed44fd330eabd466e
  • libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:67b4ad5b72c8fe6a06711869a3323c8587300eef
  • libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:4f5db511fa242e5ffcc90b0371602e4ed48ff925
  • libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:fa59e025d9b4bd0b77a90cc0e484056fed39eeef
  • libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:79c9b79808abd8ce2dd612104067d9dadd3a9718
  • libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:5bdfe489e4bf554f10c2e58aec3e54ab7b302be3
  • libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:c9946f7a6e2de8f2620ce08e63af4305832bdaf2
  • libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:20d8de521c3c989127718418262022607cf88136
  • libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:35fa64a0912ad3235780095131ea4b484f41a4bd
  • libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:0cd170e38435b5a57385f5b7ae54b5766c911a4f
  • libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:570bbe3df8a599a82eb6e3b2800ee3859f4b6d5e
  • libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:5ccf986529cee14998bf4a44804c53de86b9b383
  • libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:9dd49fb81c195670ef2152bf19e3e5a587d2e9fa
  • nginx-extras_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:b5c3e8d1f1d79b6c32d9de8b37b628c91a72f1e8
  • nginx-full_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:b701460b8aee65a0ea9cfe046655bb30157c08fc
  • nginx-light_1.14.2-2+deb10u5+tuxcare.els11_arm64.deb
    sha:e71fb41a3861dff0e57c2bbbd5353d0e153fe537
  • libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:8ad1f56d756b74a306e47ed32a4d9cfe51a87217
  • libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:5721e4b7fb7510c11dffe08566f0ec673ec08261
  • libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:6965e0b1b0490e650107650619afe49a43a8a877
  • libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:81e3800f454160954e40ceda566736af1e686ea0
  • libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:f3d9a374894c8fe32b02e55a8ccaf6d6d9981575
  • libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:d55ea947996f586099b67f22a382fa898f0dc810
  • libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:c3ba970c2b8d6e41d1f1936bf1d798c4233e9406
  • libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:842b4844fad8afb4b4364ed848c051b0e098e856
  • libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:52daf190d4feb39fa23be757d410c0a257e57d6f
  • libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:f63e87ed22434d5da45b84b82e2991af3dc093c7
  • libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:43fd6559af93c62acd034f71d78e40645a7454e2
  • libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:7843cd3e3b462c078ec2a2ab106f622c35e73eee
  • libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:02e3341c398307e22e179684cfd4ec4058f70f3e
  • libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:3d47dfe269b2998d3e7ef7bb803bacc88e55d0d9
  • libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:30f2cf3cf0651acee6df0c0b8fc8b29e81b3c4fb
  • libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:d4b4af1212fd044f15ab5bdc19caa6ab26eb9af1
  • libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:936827fbc8889f7e26e498b1ef7ba5a760b80d98
  • libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:f4059f141a9216d0a0dc30cfdbec12c2f8bf6bc4
  • libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:71d253e513db447e3b29f9fb754609582b77e7f6
  • nginx-extras_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:f8b639d7a06b11570aead6eea5d983b2e2b54cae
  • nginx-full_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:22dd30a9c4e8f81c00941bf6df5f888912f34900
  • nginx-light_1.14.2-2+deb10u5+tuxcare.els11_armel.deb
    sha:44bd23b4a23d02d604c780bce0315c641a012ea6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.