[CLSA-2026:1793212572] nginx: Fix of CVE-2026-56434
Type:
security
Severity:
Important
Release date:
2026-10-29 15:54:37 UTC
Description:
- CVE-2026-56434: fix use-after-free in ngx_http_ssi_module by skipping a subrequest post when the request is already posted and resetting r->write_event_handler during subrequest finalization
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:c1666807271dc3cbdb714417b25bc13810b90337c27253b9b7e8215c517bfea6
  • nginx-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:0cba9e270d3cc9990ffada78185cf5850c6a33dd62140aadbc813dd26cfc4d3d
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:5d3691078163cea2587f3bcda61029157fb960ed128bc936faae454d47678e99
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:d2ad6e657d504778da97b3ee48cacc00494ebca975102a59997dc55654c44275
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:4cb90f4b49e67c04c29b71a78e7d28f1192c49f2bb731fbbe6040b4ba258ab42
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:60e04dca26f2160d4d2cdcdc0553275ac9d3a3326a03597eb9ccf9883b14eefe
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:262817d693c14716b6b5fe9537657746e4ac24ae40163746a1a2bc675b3a4cef
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:8c6259044f0b08c62e2ebcde73533137981a0d76cb2d8ff6d1c31ce67e1e9d2b
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:ee6ee3a9776e4af899084a0754225d6798bfd5f0572c9b2c0188013082b91e57
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:2aae16777acc0714cdb871dacdd0779f4f1616d140aaf2d72ca125f1e6ac19ea
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:a1a0957efc87862b7ccaf1a863ae8d1d719f49afed130844bccf631a6ca5ebcc
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:616a101d4dee41f1f328f232f3a64a41cbc45fb37ec990921bb34718500af7af
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:23e39b62c80c0179ceebb277658abd43888143ced0dc9080c085fa62262fdf59
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:740687311a0e28971866f72939522a61709c8ae6e2388ceb70e707195ccf376e
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:d1105826d5f32617609bcf6f70231a48cf49a5ec3cc3c8822dbf6dc657b609f0
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:2e1a8b91ee7054fa03fe98bc0e0401ee353ddb6e089f658b8d00ebac618ac4c8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.