[CLSA-2026:1792768772] nginx: Fix of CVE-2026-56434
Type:
security
Severity:
Important
Release date:
2026-10-25 22:48:22 UTC
Description:
- CVE-2026-56434: fix use-after-free in ngx_http_ssi_module by skipping a subrequest post when the request is already posted and resetting r->write_event_handler during subrequest finalization
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els14.aarch64.rpm
    sha:dd70d999b1931b4df009fdf6ca4b5268b0e4292823d7a2d70492ed5395a90c7f
  • nginx-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:c9aeb9d92c7cf6b50008c796701f80382495729e04201b582ce9edaebe6644b5
  • nginx-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:159c6af94ebc63e56c386783aca187999d96133b16bc3230fe57a46382d835d1
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:d336c35c062c285e6370677e524b21426cc7a40aa93eeded0b410a34d9dfc921
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els14.noarch.rpm
    sha:b5fc2b013d096c3425069c9598af1b2da4e5fa6292942492c5366fed6e7e5ee3
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.aarch64.rpm
    sha:4caa72239012f61e7f518c7074eb0fc23560fde60c2e22765f22aae0391f0a6a
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:47b3ba820f815c9c3f4b36b5d7eed742cfe56c7625705fb1ff998bcdbff6df7f
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:7d242ffeb49c6a1d2f4e7a99089e50a2bcbc85dfd7f8e7da2393cc5e0c91b8ee
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.aarch64.rpm
    sha:77b8a6872666f53cc4932a5268dadd30197d6d60f52480b5aa641e7a61d4e877
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:dd4ba9c39cdd46e23c72ed85929d25b3cf9b4531f6b0fef9fc4703d8170b259d
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:8bbb666395e343684125a373d50af31ccb18c3e771aad2a58c1799260b03023a
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.aarch64.rpm
    sha:84b6a63be8616b72784c1fed834fc7efa9344a82cb8fff3c21bff79f8a881285
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:56f8b633634a29617d77d9968782cb8a41e4123fc547a7bbaa75d778af26b20f
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:8532be9964fa43cfa53bb7f8d9efb4c3e0a2d2ad53a66b67a80bfa69a84e0639
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.aarch64.rpm
    sha:c665dd101c025fe74d39bde95795f55b74f2c3bb6873ee62c0f44fec4db1e316
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:8b84bf98aec72285a99bf55df299347ca977299b1e21b8174107571177ad3f47
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:bcedd2f4e31eec8751d16a2ee1d477c1696c23ef29dfd1d9ff0b7886426c643b
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.aarch64.rpm
    sha:9898e012fd2b47bce8562d61cb0cf130f37bb933eb89e348d348ad7258a63bed
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:06e3ddf81c0798c3dc0d929a3ed6c55e1d91a6570371815be77af5f63fd83fa5
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:0cae01c40890419e6ed33017106a1942a749a346ab26b7baa4027c5ad86cc153
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.aarch64.rpm
    sha:b5f63d8c0446bd1ae549cc0f9d2a1411f4d61ff625cd5feb855143819fbfabd2
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.i686.rpm
    sha:5e133efbe50d1d17291b30de15d4b229291a49af521ee76cb862e7a66f0e728f
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els14.x86_64.rpm
    sha:eada53226b28d0a7361cce3dbb08acc0f4b1254c3e71fabcdb770059b78df1a8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.