[CLSA-2026:1788338106] nginx: Fix of CVE-2026-56434
Type:
security
Severity:
Important
Release date:
2026-09-02 08:35:16 UTC
Description:
- CVE-2026-56434: avoid duplicate subrequest finalization to prevent a use-after-free in the SSI filter during unbuffered proxying
CVEs fixed:
Updated packages:
  • nginx-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.x86_64.rpm
    sha:697986bd444e395041c1c45d6b4d48bfcfebe5a06eec837ed026564d0017a4e8
  • nginx-all-modules-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.noarch.rpm
    sha:189f85e86dd35e596267c211aaac300eeb478f2d8a969d4cf90dd000abe9449a
  • nginx-filesystem-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.noarch.rpm
    sha:5bebcc52c5bdbf2ddcc86f1ad64987393402e7e403ea53c272e1ad2c08d5eec9
  • nginx-mod-http-image-filter-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.x86_64.rpm
    sha:1b7e5640d5c51ea31e75e636892a620cc9c58e3478c294e2dd4d7ba0d0ece4ca
  • nginx-mod-http-perl-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.x86_64.rpm
    sha:acfe41ae9aaca5d2bf4376367a0c60985159a03aabe7ef6f37923c10df243c7d
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.x86_64.rpm
    sha:a4b09ad2860ffd65a003ef8186e5c0fceae69c52c896e9deced2065b6a54673c
  • nginx-mod-mail-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.x86_64.rpm
    sha:891733a78c4951a6e062c916acc39eeb18cee3723208bb07176beb31ad52a9f6
  • nginx-mod-stream-1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15.x86_64.rpm
    sha:fff1963491efd94e4aa01a34e7281374908fd03b5acb77ae08bf76a9f8b26c4c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.