[CLSA-2026:1792580871] nginx: Fix of CVE-2026-15176
Type:
security
Severity:
Critical
Release date:
2026-10-21 20:42:01 UTC
Description:
- CVE-2026-15176: reject URI to path mapping in ngx_http_map_uri_to_path() while a rewrite has changed the URI and no new location has been chosen yet, closing a window that mapped requests in an aliased location to an incorrect path
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els13.aarch64.rpm
    sha:e34d6f198ff1c01d06c9b9e8a83645ef9c18d98a8a48a76e2281002006a65555
  • nginx-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:fa042d82b883ecf7af302230744a28a69665c78c9daf5e0d1d44c293617f0523
  • nginx-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:99322dd8ef89944193667c43749d6a33941f022fe87a963c864638bc0d9738f2
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els13.noarch.rpm
    sha:808a5fadc43c790981881f0ab04aedc137ee7c8077fb2b8ee3ebb986f662b17c
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els13.noarch.rpm
    sha:005e350a4481f92a40057c9251101074bb8e7b627642f0372e1f6c253ea6a572
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els13.aarch64.rpm
    sha:4ef250112cc356929452ed2504001bd418da3bc2af56bd44ddc01ba2936e4ee5
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:0b9a9acb1910fdd0f7bc68f7a70b713486fe46c148da2e87e4ec720d4e1f3a98
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:ad8b9cb249dd9bec0d11c5d68f8901b63e3340d301ce238a9c0b92fc4ad02b97
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els13.aarch64.rpm
    sha:c3da004727844912ce9fe922c1cd3c5680343207b96f683554edad4344a4cf98
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:6b60ef4112266bbf52ecb6778b36390eecfb1d1788d18beb2b0c2dfaade1af71
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:049e98f21eb821be339740a4153bec60e5b478868f2c32bc2cc9c3d446d8d255
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els13.aarch64.rpm
    sha:29901799b11a81ba066903329d6d87933c64b7905b6c3811d00707cf9b46023f
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:28066a03549a986f80a2388ccd82a42305b097414aeb0306b470c33f6f530138
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:6ffc26794ede4f425ac5687fde5db3ed83f619e90de3de399b2f2b1ddad0b26e
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els13.aarch64.rpm
    sha:6e132f07e6bded809780f6447f55eddf420166eebcb023a1d12f1bd4927ca384
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:9bfcf7116c2598416cd0a45c0e4485bec6053bc943603836749856a1a7d4b003
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:b9b6ba30867871fa9854ba7da4b97f463949bb1d37c7fd667e1da940c6ca29a5
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els13.aarch64.rpm
    sha:6f4d24a1ebd887e7155ff3f1904e303374d584723211fc507d792d8e11c93a7e
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:36b2a155757cbba46e1e430680f8151ddb14948150415e27f01bec63ad2b5394
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:55dceaf01b14e833104f99c1fce925e690d612e5637f4f33c0274aa618e5ced6
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els13.aarch64.rpm
    sha:702d0e0df557a171182ee9ffd875e5f7b19e4d6b00095be550cbdf5a9bbba47c
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els13.i686.rpm
    sha:c7b4223096447306a3156ffaf35220dc4aa84a99147f49086a56e8823b47f772
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els13.x86_64.rpm
    sha:09614bcde2df530f38fbdeeb3534af6ab0f518319f3e72c20c30ee0f3e1c938b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.