Release date:
2026-10-23 15:50:49 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in ngx_http_map_uri_to_path() when
$request_filename is evaluated after a rewrite inside an "alias" location
- debian/patches/CVE-2026-15176.patch: reject the URI to path mapping for
an "alias" location while r->uri_changed is set, and clear
r->valid_location in ngx_http_script_break_code() when the URI was
changed, so a rewritten URI shorter than the location prefix is no
longer mapped to a path
- CVE-2026-15176
Updated packages:
-
libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:d55d030306c7b924c9f3224a3dc14d4e3500f730
-
libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:da636369809e9775fc46e277bde213a8e917cdae
-
libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:d8b992db3b11c0c0c445128a71dbaa5f6e3ba2fc
-
libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:5a94f7bf81f526e79e8c94f08d45ac136edd4209
-
libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:f0297f4f5fe927ce3ff3a372a919f198b19cad67
-
libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:f226171f69cabfb648afd4cda07041831cdda65c
-
libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:3eb6fef611f0faac7bf2bf84403de9fcc590fcab
-
libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:ab7f0aebc984ea5510b104ffeb0cf015bde74692
-
libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:0bb9d5a7202f6f31c16f6bc99688b5c60aa53b9e
-
libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:a6d2953be2fe5f316832c4394aa273e9cba09d8f
-
libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:f0eab7eaf6701daab6e030b4466feb4e4781ad0f
-
libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:7b2eafd0e3b9da45931b23858f86b7d2c041988c
-
libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:6d5e06f89f124b6f082e79b37dae2ded5ed26b82
-
libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:59859b112f0073e359623832e2cfd4887a1280c0
-
libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:f860202a3b84b341272ecc107beb93f3a114c1af
-
libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:8aaa02ea6a9cefa440647aad8da5df7a4a4283bb
-
libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:60d7248747b67627d7e3aa3c8624439c8bfee0f9
-
libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:2d0b5bb935a935dbd938cba3103c0c8fe6614119
-
libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:6f214a85d50247e16869d1eb717ae7e991b7d473
-
nginx_1.14.2-2+deb10u5+tuxcare.els10_all.deb
sha:0774c53bf26283e8ee8b0273fdd158f619044a5a
-
nginx-common_1.14.2-2+deb10u5+tuxcare.els10_all.deb
sha:ac0171429c2d09ce4a05df9b994b0631b1db5fb8
-
nginx-doc_1.14.2-2+deb10u5+tuxcare.els10_all.deb
sha:bbd0775a72a5555af5652b3e6c4bfcb9e3afdc4c
-
nginx-extras_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:84cae282a8cf165df559faf46b4ec61f86112776
-
nginx-full_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:cb5fb787a0526759709842e89186b44db70c1e02
-
nginx-light_1.14.2-2+deb10u5+tuxcare.els10_amd64.deb
sha:8fe9b513ef219884b09f7ba013ae7f93266600e8
-
libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:8918909310468e3f0df3b1cf823b32700ff116f9
-
libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:42feeaa00746ad029b56932204b0c779d1ff3d77
-
libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:51c5ade9f65a5eab611e91edb5a0f9b9acb0b97a
-
libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:24dc0175648d32544649b0ff6b8df513c26a6685
-
libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:4118c1dd523303118389a16d4c68a83d8e7fd3e6
-
libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:3a939591eb31bfcf965891721f336faee20e0dc1
-
libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:347efc2600f996ad69caa5448866f56205b6a310
-
libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:671174b8c4295da1705b37cfdc21bb319829e2b5
-
libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:87e1b90d02abc9e19ee12a31149761065a0bcae9
-
libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:5556170c505e7590f9d3144f595b70699b215e24
-
libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:e8aa108c46227f95f09c3e29147589b92693d271
-
libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:7ea4f127a157eb80f89b6c5a58268efa60dd2406
-
libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:5dfd7881c43524bf4f1e217c29c827cd84b558d8
-
libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:53fb1ae49b8b7ecd5b7b7a126cc4b59c0b049762
-
libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:273639d01f12a86d74a6bcc89d50cf4e0de62efe
-
libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:ca32796d8a7aedeaf84b4d6c98869a52e29b58bd
-
libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:1ac27da7180832ef1884214c1cadf3368ea9c7e4
-
libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:368624dc703cdff8ed07f772a4259ef4d10b3282
-
libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:006b800b0305d3d9c44e4fc5a664737d0686a0de
-
nginx-extras_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:3fcbd30349fe3403f718f37986510dc6e3c532a7
-
nginx-full_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:108c730186e9fe209bda10d9bead268dbb1a0803
-
nginx-light_1.14.2-2+deb10u5+tuxcare.els10_arm64.deb
sha:2da94ea15d345ed11208fb5179fefecc9806d560
-
libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:b55dacd30fc5806a885ad3d6b3043ea4b0a5491a
-
libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:27eaab84b7905941e6607e30d198838b13e5867f
-
libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:3236c505c6c453825026d0eb4f31534d0c8f379e
-
libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:639bf6d676cc4458e417c6c2b3e07d5b53ec07ed
-
libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:7a8c71e1db1984de132219d102c562173ae012b2
-
libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:5ea6a74b552590a2d01e99a0134ad94e12185bf6
-
libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:d1691bfa6de4324d661e05754af1ca583c766f23
-
libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:90a642083ed73b90c9bea9d851135877a4e3a375
-
libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:133104def798d92e403e250954c49875583b61d6
-
libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:6cf5af88de5a5499438f56bcce4a874e0e9063ef
-
libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:8bce4130e6eb3e01e6b69a96cb2d8d20c017fb8e
-
libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:8c519d08f6821417d1f0cd4c743d0ea9ff8866a5
-
libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:175c30d906c622bc6e39e6c5491f545cbf2ca891
-
libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:04aa7237a205eca106810185d6606e630a748c72
-
libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:80afc930b7ab23588bdae1c11fb12074525df3ad
-
libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:d4c6988dff6ce76884baa402666ea0d16e6bfa3b
-
libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:7043a4925c0df346daa28fc24772e26a72454dfb
-
libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:f51383ad1c2b8bc7299aea4f140c27e334ce9426
-
libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:ee14b8c2e0624c8e7a05fecf68aee885dc45abf9
-
nginx-extras_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:87981fe80002bb8ed22e074137ec7e3c4625b4bb
-
nginx-full_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:8ad855ab4c6b3d83e460f01d64d72b156d2b1712
-
nginx-light_1.14.2-2+deb10u5+tuxcare.els10_armel.deb
sha:cc367f1885b4e576f50621099fd22ef6b9c538d5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
