[CLSA-2026:1794264292] nginx: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-09 22:45:04 UTC
Description:
- CVE-2026-56434: avoid posting an already posted subrequest, fixing a duplicate subrequest finalization that could lead to a use-after-free (e.g. with SSI includes during unbuffered proxying)
CVEs fixed:
Updated packages:
  • nginx-1.10.3-4.el6.tuxcare.els17.i686.rpm
    sha:af50369d80ac9ce23ce5561765bb77cdc0bdac456c37832e3863bb4b0d04d671
  • nginx-1.10.3-4.el6.tuxcare.els17.x86_64.rpm
    sha:79d1a559ae44465975939b2c7ebffd2c7a4793f0cb31f74c9395ff76db2fdd29
  • nginx-all-modules-1.10.3-4.el6.tuxcare.els17.noarch.rpm
    sha:2686c2c0b8c24504bbd47c24e2b98f4a275bd9b3d0c8f72b9d09f1a55a7c2404
  • nginx-filesystem-1.10.3-4.el6.tuxcare.els17.noarch.rpm
    sha:f1482ecd3a100e6144870f342cc5512e4ef81e0a04b538e9a45d63c3109ce2ae
  • nginx-mod-http-geoip-1.10.3-4.el6.tuxcare.els17.i686.rpm
    sha:35dc7868d0f6ff8c29af90a88bbb2ccc9939d7f1b42eccfc51927e17683fa73c
  • nginx-mod-http-geoip-1.10.3-4.el6.tuxcare.els17.x86_64.rpm
    sha:029bfe9fdf12ed303fc2eb8098787c7ef1747bbdbde3fbd708ec41bf30ec611b
  • nginx-mod-http-image-filter-1.10.3-4.el6.tuxcare.els17.i686.rpm
    sha:6f5f0c45c204cd988e16d9971ca8b39a525422bd672bdb8bc4dbda8d59ac5639
  • nginx-mod-http-image-filter-1.10.3-4.el6.tuxcare.els17.x86_64.rpm
    sha:c8375895ff47e039979b8230d4b3107e3dac93708245d1841ef11b68ceef56b3
  • nginx-mod-http-perl-1.10.3-4.el6.tuxcare.els17.i686.rpm
    sha:a1cd8f35c6dadc22030769711546117cb02b2cb1e1d129a3e822986395c8d6cc
  • nginx-mod-http-perl-1.10.3-4.el6.tuxcare.els17.x86_64.rpm
    sha:49ab533ab78f09ff74dc32a94afc3fd5440d36747fbcb1d17b556da9b45b77de
  • nginx-mod-http-xslt-filter-1.10.3-4.el6.tuxcare.els17.i686.rpm
    sha:cc49db140c25b91154365cff412e2c04dd10c87d0fdee8cca12c213f4a0f1ea4
  • nginx-mod-http-xslt-filter-1.10.3-4.el6.tuxcare.els17.x86_64.rpm
    sha:5625a8548d4142a7418e2ce9333e79d9bc228cffe52ee7e683b556324b5da9e2
  • nginx-mod-mail-1.10.3-4.el6.tuxcare.els17.i686.rpm
    sha:b24041c3c09baccf05d9a88dc56811845e40035d309f2a2049ec186b5a3e9893
  • nginx-mod-mail-1.10.3-4.el6.tuxcare.els17.x86_64.rpm
    sha:1c0480c100cd6cfb3ad9b313b3fbcb3d7b832a8d8b5117b59fc2c72e387e73f7
  • nginx-mod-stream-1.10.3-4.el6.tuxcare.els17.i686.rpm
    sha:d9c1f55173d48e1ab4c85929124da60ebf06e449ee6ea1f279a3657cc27ce852
  • nginx-mod-stream-1.10.3-4.el6.tuxcare.els17.x86_64.rpm
    sha:4eaa6d82298f7bca6e33b6a10e709d5211aa5df78eaf79e403f701c608c73b98
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.