[CLSA-2026:1779714591] nginx: Fix of CVE-2026-9256
Type:
security
Severity:
Low
Release date:
2026-05-25 13:09:56 UTC
Description:
1.24.0.tuxcare.els2-r0: - CVE-2026-9256 fixed buffer overflow with overlapping captures in ngx_http_rewrite_module
Updated packages:
  • nginx-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1wPBQ6mkNe3H8MsRxfk38FSwUiDQ=
  • nginx-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1djGuN2wRyXhCKpngdtmrOlqgLrk=
  • nginx-debug-1.24.0.tuxcare.els2-rr0.apk
    sha:Q16JFIMDJ2XOVxBEmms+G6Rh+imbE=
  • nginx-debug-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1IqRWMlcwW2I4qYGEhpiAZdC6GHE=
  • nginx-doc-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1AEhbPdih1lmIXoaJ5JQYJCcYZL8=
  • nginx-doc-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1mMR/FHJ8WMbtwbQQp+SlGAHnFh0=
  • nginx-mod-devel-kit-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1sVaBwSfxDZSVoUSF8Y/XXpsQohQ=
  • nginx-mod-devel-kit-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1p2s00Aoc04rJRSvRWWwtD3tk29U=
  • nginx-mod-http-accounting-1.24.0.tuxcare.els2-rr0.apk
    sha:Q11hn98dgaUX+Ux3etcGHourdBmFw=
  • nginx-mod-http-accounting-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1HFDyTKL98ikTKDuAmDjFV3nD1Lc=
  • nginx-mod-http-array-var-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1UUQ3BxVB+hLUfRP77hzz3aGQLBs=
  • nginx-mod-http-array-var-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1leHB3J7xQvWETY61GjnD8SfgiRA=
  • nginx-mod-http-auth-jwt-1.24.0.tuxcare.els2-rr0.apk
    sha:Q16QGgTzltXnQubIYMHSPBxn80DcQ=
  • nginx-mod-http-auth-jwt-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1U0oXuCXDm+XGhQCF5GO4BvUcv+E=
  • nginx-mod-http-brotli-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1azyGJECOkenwwYZXM3T76+ZWzfc=
  • nginx-mod-http-brotli-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1jeJF9d9D0E3AI/Sjd64F7Ze+f+U=
  • nginx-mod-http-cache-purge-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1dFve+WJY1wlgbUX+7bLsHeFnJNw=
  • nginx-mod-http-cache-purge-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1OaT+ek27voPst6bLDVG+pWqm5TE=
  • nginx-mod-http-cookie-flag-1.24.0.tuxcare.els2-rr0.apk
    sha:Q13Q++z5v3f6/VkIOJwsgICpelGNc=
  • nginx-mod-http-cookie-flag-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1WRH/Y4Uc2VQW2YQKsyFclvMIb9U=
  • nginx-mod-http-dav-ext-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1gj8a3szHPg1McAvmBIAnEW9Zr5A=
  • nginx-mod-http-dav-ext-1.24.0.tuxcare.els2-rr0.apk
    sha:Q12wCXGnIeXnxZExEfaiDA4aOU43s=
  • nginx-mod-http-echo-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1GmVrsanRXkwcz1X6JJHGQpgC/ww=
  • nginx-mod-http-echo-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1+MsTTAm63gRVLxKzoQ+soRt5SGU=
  • nginx-mod-http-encrypted-session-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1UsVD7Vj8PmCrUEkYSOBoMXIwA7Q=
  • nginx-mod-http-encrypted-session-1.24.0.tuxcare.els2-rr0.apk
    sha:Q12MazD5bXoc+swftwpoNz1lthGpA=
  • nginx-mod-http-fancyindex-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1hh3g+EGjJ/Jdo0W3sbJ+pKIic0s=
  • nginx-mod-http-fancyindex-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1RfY9sTW9YCZ9WIByHdERD5cQT9g=
  • nginx-mod-http-geoip-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1JQeTd7/DibCPzuYZruWj84s5jpM=
  • nginx-mod-http-geoip-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1AsKOh5L1J12XWaT7U5XfSGXBx8o=
  • nginx-mod-http-geoip2-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1fNJiwGOIzLZRAmTihpcMCANePFY=
  • nginx-mod-http-geoip2-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1MBYPSGBWnnQfvZ4TsdBWqQcDWis=
  • nginx-mod-http-headers-more-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1O3/gqV+hrx8kIP01f5uSwe6O4HU=
  • nginx-mod-http-headers-more-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1KmAsxtxRh9Bgq5KuD80A8GOn9Mk=
  • nginx-mod-http-image-filter-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1fjgpif634S+nlwQHd2KlZTajsL4=
  • nginx-mod-http-image-filter-1.24.0.tuxcare.els2-rr0.apk
    sha:Q14msdLivEKSgwTFGozMqkVwDnI3c=
  • nginx-mod-http-js-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1COg6gt8cpUAi1PDZKXkWHpAzptg=
  • nginx-mod-http-js-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1+xBuIMqvj+JaimZ+5olG8jfqF28=
  • nginx-mod-http-keyval-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1CICrvgaqUwQEexUmJ2EQTxIXO84=
  • nginx-mod-http-keyval-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1E9QwLFDf45gH/l+tIsu/dzj3oSU=
  • nginx-mod-http-log-zmq-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1357PaZHdrkp/DIkTBbBt1dViZwU=
  • nginx-mod-http-log-zmq-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1isQL8ZITcWVYeLgkmdq38AoE8Dk=
  • nginx-mod-http-lua-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1ux5h4Cbg8Dd5xBhNHllTDeqhbGM=
  • nginx-mod-http-lua-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1y+Dtd/GiofNBJP4M7taSuyO0P58=
  • nginx-mod-http-lua-upstream-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1/9PMlDohl6xibGHHGMgYwdu7F9s=
  • nginx-mod-http-lua-upstream-1.24.0.tuxcare.els2-rr0.apk
    sha:Q10T2zg5XJQa3ep5XQy1n2xfGf+J8=
  • nginx-mod-http-naxsi-1.24.0.tuxcare.els2-rr0.apk
    sha:Q12PAyqtd/13538y7NtS6zdqeEESs=
  • nginx-mod-http-naxsi-1.24.0.tuxcare.els2-rr0.apk
    sha:Q14eRPFsksAmYlpJlJtQBNYURc5zc=
  • nginx-mod-http-nchan-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1mC54NiIvDh5/KzJMmcsvcBqfRBo=
  • nginx-mod-http-nchan-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1mw8WW8ByD4/rN1kUuD4a/MB5nnU=
  • nginx-mod-http-perl-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1Oo21UI0tEKK49bvyj5Z3Z4fGDow=
  • nginx-mod-http-perl-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1Uf1Zm8b6yqBbL6U9Ue6wxfJiI30=
  • nginx-mod-http-redis2-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1bcM1i1X4CmAkbKyRNe8YYRV97ec=
  • nginx-mod-http-redis2-1.24.0.tuxcare.els2-rr0.apk
    sha:Q19bAozFDMt6tQJza2eyobQO0XRZI=
  • nginx-mod-http-set-misc-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1Hj0RZWjRDLXEndd2s1hq2DLcEVc=
  • nginx-mod-http-set-misc-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1tOgjdm/sYBvLBVH5LBe2zivZrjM=
  • nginx-mod-http-shibboleth-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1838KYAAZu5jkqJGUMfQoRrke6Mo=
  • nginx-mod-http-shibboleth-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1uWC0TijepxzCLedOX9Rr5f5P3xY=
  • nginx-mod-http-untar-1.24.0.tuxcare.els2-rr0.apk
    sha:Q14RxQ5uxdtvaLjmMCerfP9VFnCZM=
  • nginx-mod-http-untar-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1/7gIhYnp41zicfKK5qukOSc0E98=
  • nginx-mod-http-upload-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1esXW+8jVwqaBBNiexsvClvlggyA=
  • nginx-mod-http-upload-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1iJ8rTBwt9yMZzMGOrD5yGRq6gm4=
  • nginx-mod-http-upload-progress-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1hccpAkfR3ubRwamOqutUQxRWins=
  • nginx-mod-http-upload-progress-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1Q61r7C4t1UUSG5VjbSYuMT0M0Mc=
  • nginx-mod-http-upstream-fair-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1sy3wRXle4mBdjT8iTamusCy6UtQ=
  • nginx-mod-http-upstream-fair-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1dtrcZTMhNCMYmAq8zzcSGeoQ1FU=
  • nginx-mod-http-upstream-jdomain-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1jvrbHWef3bQb0mw4F11pOswc0Lg=
  • nginx-mod-http-upstream-jdomain-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1TiYcBZjBd3FzuZh6aKCagqqbza0=
  • nginx-mod-http-vod-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1zpb3BSpsKU79LaWn6hGCg4lAb+w=
  • nginx-mod-http-vod-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1A+HTHImsZvXHGmkp1W+l7byEU/I=
  • nginx-mod-http-vts-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1luKa7CyaIplcD4xlsqALoaNz+QI=
  • nginx-mod-http-vts-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1/UV07tg8iYgg2ciCqf3RvUuwLDI=
  • nginx-mod-http-xslt-filter-1.24.0.tuxcare.els2-rr0.apk
    sha:Q19akcnHXNlTUR+qqg2F46tVEc9Vc=
  • nginx-mod-http-xslt-filter-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1xRWNCp/N3WH72XO+OfOTY9UnOiA=
  • nginx-mod-http-zip-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1/dNxuhYbmpwOXdnNaWo44m2uszM=
  • nginx-mod-http-zip-1.24.0.tuxcare.els2-rr0.apk
    sha:Q161wwlS49gxkoDqg/sNeB7Zxcypw=
  • nginx-mod-mail-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1bY9155z1E4JswwLKfeizPfFI8iM=
  • nginx-mod-mail-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1XCbUWem+9RUxGoTkfY294Ir9JQU=
  • nginx-mod-rtmp-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1HkwsdE+rT2Um4ejU2BzU44ctmB4=
  • nginx-mod-rtmp-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1vdcXosJI8Ln79w8zi4VCQbyvtRM=
  • nginx-mod-stream-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1a+OheZpYPVNK+UfEWKOIc8MI4Qk=
  • nginx-mod-stream-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1DTs88o6OEvFgMkE26hsfcTnYPG0=
  • nginx-mod-stream-geoip-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1yMBtrZodFHfZH0d9FMjsfs9pO3c=
  • nginx-mod-stream-geoip-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1AuoM7UP6+arkey9+N+8fZuOBs3o=
  • nginx-mod-stream-geoip2-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1dAmS4foWyA3v0ZlZrYuS+bFDync=
  • nginx-mod-stream-geoip2-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1jM7XJr1Sc1cGl3cpZ1KnZnN4nl0=
  • nginx-mod-stream-js-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1sKxY/7Gpjfw7p7rwxqiLgi1322A=
  • nginx-mod-stream-js-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1d8KYUKGOrbL8IPRiBfqiVZENAgM=
  • nginx-openrc-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1VKjC5bCu0NM7BXNPuDWQVpY7HcM=
  • nginx-openrc-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1yH6FnXcY7tLbev2xMnFGB9OFg/c=
  • nginx-vim-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1GMi2O/tYOAH1xJvpYL7OUWf8NYo=
  • nginx-vim-1.24.0.tuxcare.els2-rr0.apk
    sha:Q1osQHpJSxNuifLck+7a37+2LE7nI=
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.