Release date:
2026-10-29 09:00:46 UTC
Description:
* SECURITY UPDATE: use-after-free via an unbounded number of pending
asynchronous operations on a request
- debian/patches/CVE-2026-97205.patch: add NGX_HTTP_MAX_BLOCKED and
check r->main->blocked against it in the copy filter, the cache lock,
the cache aio read and the upstream thread handler, so the 8-bit
pending operation counter can no longer wrap to zero and let the
request pool be freed while operations still reference it; operations
beyond the limit are performed synchronously or refused
- CVE-2026-97205
Updated packages:
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:7b47605b23a6a237e4d1cc6a96dff9941a0f9960
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:b007dd7a3a9e4623268a6095871080f01715e2a2
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:e405c1c5462407f67c7fb8f23b986efcba7001fb
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:738ca04c31d68398f9c421b9144fb06cd7c42a63
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:b8b23aeba3a554b4cc96f421a7f160675485a9e8
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:5698076372ee7877ae04e8664d1639fda5809c7b
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:93f991d775eeaa14cde0f8cef9219765b1ff9908
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:fd37267ca3d076674fc003d64c2ca490e018e9c4
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:4b20fca90380bbcb149f21b7aeef5ba46520bfbb
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:8128a65a2a40b2c4f96e31305b145d300b84e1b5
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:b402bea608ba848d3edb3d53f3e2d8c5f9181f22
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:d863899fd7ec6392ad1815b8f15b9da01e2053d5
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:2dfe227dabab8a1d0364d2d9b2edd51352da446c
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:40231c8efa9532f7b45e4929ec02d89ac427f5d1
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:bcfaaa0c5f7751baf1d1ed06be7e2a3dce7b0db0
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:354a021e73f2635df1ec9e7e78d1bb5678d955cd
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:898474223480127a359efdaf6d6459d7ac9e3e0f
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:ae3d64e4e2881af379b3b68d8955b7fca9f57046
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:2619ba6830b7b4a1f98531a49d298ea318042e47
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:993378d1697a783c250d7bdb1ead685dc1760d24
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:1ea318eca467c8a0da8496b0713ea0a5667192bd
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:a3f0c9b2b4fca3b8def393b924d25f968c09b866
-
nginx_1.18.0-6.1+deb11u8+tuxcare.els4_all.deb
sha:bf3c997253d1a320e74d9d80773300926073e713
-
nginx-common_1.18.0-6.1+deb11u8+tuxcare.els4_all.deb
sha:2f0efad84ae36d46bf1fa2eb32d7da57a487c6fa
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:0fd5fd5dbbb7ee82de33f12aad60cb94fd7d6cda
-
nginx-doc_1.18.0-6.1+deb11u8+tuxcare.els4_all.deb
sha:649f263b6ddabf6d483ab65f3f6bb42964e2c7be
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:a8842f92b4b2a2f053536b2f6cb4a7b4b5cd22b3
-
nginx-full_1.18.0-6.1+deb11u8+tuxcare.els4_all.deb
sha:1e1270c1585cc875a3d92a1f9931b63d0bad39c3
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els4_amd64.deb
sha:af09df992f65273be42ff6a2b684e6c0986a5ba9
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:31d39b2463e86a3ae2cf7b6a0071c3083d7013da
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:cdaca017af37592ba564e3b53d78cafa7f081687
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:a14b81a6cc2ffc650146a6160d83add44340a2f1
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:7c526717524be7aa7fa857db2ce4533ff4dd1a75
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:dbb8e294ca04305921f02fb83384aa217ce4e996
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:d14c28d5fec451bb6a594f712192de8faced9ff4
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:7604307dbf0e7f8f199449e4beeabb795e6aa02e
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:93439d461cbd0e9fd238d71e7d0b165c975ecd30
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:0a847bd555a49da0248d32428497cb20fef78290
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:372de09a96f7ad4babb8b654ebbbd7834dded20c
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:4d7bbe2c77276235243a9c113583565f7b144739
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:3d006d86366d3695df384323e0cb2f0cd1d1c83f
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:c3fe00e509cf09ccfc7587be30e3cf420c8e5ef3
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:2d317f4fdfa211840fa2f6c9fde1ba28944c6059
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:c4dbc963c9f203bbff747eeb2d9daea51cdc0335
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:0b5b7cd013f70391228e93df88d80ed77f5ac739
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:edeeef2e5032ad656587067804ce5a79e0fe6c11
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:08a77a4efa80af42cb1f85395624ce4058c96048
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:69a2a7926a062f5b1fb5a5b04876c6f796f13058
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:86223a4102d65880ba366f3fe565fe84e15ea9e9
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:c74da1bc19dc89424203513c65efdb14900befdf
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:31520777b83e0ebf324d317c3abe7c556cb2b082
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:54b99cfab31779c7586bd1f49cdc7f922bb48fb1
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:f4273fea099aaf8e59892495727ed0e264c51061
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els4_arm64.deb
sha:f7dcd137f8fd0c5b36c7ac0cec79d394c11b369e
-
libnginx-mod-http-auth-pam_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:f5f9223a968fb4ee91f12436db0523fc6641a0ca
-
libnginx-mod-http-cache-purge_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:6f42bd5263fcfc9e8b4782f1a00e617be4c8096e
-
libnginx-mod-http-dav-ext_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:019663c01687ccc0f8e2216a688dc1e460b1850c
-
libnginx-mod-http-echo_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:24d86134be6b165a22d57f2fed6dd70befa6d0e4
-
libnginx-mod-http-fancyindex_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:7c79aafd5aba1081217d79931538ba4397ffeec4
-
libnginx-mod-http-geoip_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:062ab4789361c5b688780a4b0b5e43174bd43ad9
-
libnginx-mod-http-geoip2_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:1edfb0d95e16bb5dbd6e160e407b6dbf1c9d2b12
-
libnginx-mod-http-headers-more-filter_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:efa344dcac3a6061415d5997a437e681ce608c84
-
libnginx-mod-http-image-filter_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:634dc5d15ea894b51575b056d0549a00d37a9fb1
-
libnginx-mod-http-lua_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:8ab5ea73fd053fcfbf30c9430a87f04698d40425
-
libnginx-mod-http-ndk_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:354052fc6a60c63e3cd57c3ff4b456291e4faad7
-
libnginx-mod-http-perl_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:6a0d5fd32b3e1a224644ebfafa0cf2ed49805d27
-
libnginx-mod-http-subs-filter_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:7f206ab1d9c36d2ede0753f1f8bd9d6b86302783
-
libnginx-mod-http-uploadprogress_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:2a6a4c0a0dee41f4a0dfbb3698025911b1b38c1d
-
libnginx-mod-http-upstream-fair_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:95d02333d361d4e084e95a0258de7fc17b5ad8ad
-
libnginx-mod-http-xslt-filter_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:e4ddaebd943c581fe8cc7986dfedaebbdfe07112
-
libnginx-mod-mail_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:16f3acd266ae8db5409828c0fda8a8e6a1f780cc
-
libnginx-mod-nchan_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:6d035b00207ccd74e32cb9eb0aedf1f8827781b3
-
libnginx-mod-rtmp_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:4c2ab8d4a0214c0958cfdb252ae4999d4d30d144
-
libnginx-mod-stream_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:555e101bf1c5f1006b76891b104cbd243d90f86b
-
libnginx-mod-stream-geoip_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:4dfeefeec3e6ed75698df60c9fd7b64bd9813787
-
libnginx-mod-stream-geoip2_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:56b4eba2165eaa705ead27c0319332f227ef65b6
-
nginx-core_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:fb645a71859febe72e981aadd493e31c99420e6a
-
nginx-extras_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:a0280639e14af5fae1e097df0e78904e72827d11
-
nginx-light_1.18.0-6.1+deb11u8+tuxcare.els4_armel.deb
sha:2d893982aa073d078691d576207e423bec19e683
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
