[CLSA-2026:1793020741] nginx: Fix of CVE-2026-60005
Type:
security
Severity:
Important
Release date:
2026-10-26 13:19:11 UTC
Description:
- CVE-2026-60005: fix uninitialized memory read in ngx_http_regex_exec() by resetting r->ncaptures when the captures array is reallocated, so a stale capture count can no longer be used after a regex that did not match
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:352b657377b6df309b3277fa4f792a9e327bfd4e77bdae273918a1a8aada0e48
  • nginx-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:be4a16fc1220229d40bb81244040a6a8510665822bfcec2fb05d116ad70ee4b8
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:a923644e26aca949e2a286eb3aae041e9eadc1290b3559b2190fedea28745533
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:b8a348ed9c93c91ea20f6dc329e393b439e7590c36bcb4ef0279b77db454455b
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:31ce6e6c69fdee1a8f68c415d859a525c797e0cf353d052b7f2b95d86662fa44
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:ba7441a42d1d3180ac0064e069843e9c3d592083fc455e01f6d4079d12646242
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:65bce703c92f0a41a954e6cf5cb5fdbde417b9c2537480ccb2654059ecd6521e
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:126609b33c5b423c95cc472bec5be2d240cd5f473787b370a30454a6f5af9d27
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:ae8d0ffa819e15f7dc1e49291bf8ab1a490e15c747d4bdaf678106d90f0342df
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:ccdd434cd4b97e4071c245d01083c63bfaf723a7e50ba8b8a1ce7eb8dd5b5fd2
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:94258aeb5522c75e229881ab272c63dbf6fc2d2a4a1d84783f54c874590f085f
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:643c6d1e689c7cb86b03fccd171e2cd3328a2af3f5e5dd2595cb186987530778
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:35963272c2c803e22221d7ec2f7728b37cbf6dbb5886a31a0582698d06ec7153
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:704340f157cb4def56df0c74377649c126b9a1f7b93939c792cf291d81c36968
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:10f47b5d516eb93ae0b8f0c84d057ac1b6588ad2a43b15dd825270d7cc24fec1
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:27806fe38f1ff552d03b90839b11279402dfc811fbd350fd1371aa16e933058f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.