[CLSA-2026:1793021177] nginx: Fix of CVE-2026-60005
Type:
security
Severity:
Important
Release date:
2026-10-26 17:50:58 UTC
Description:
- CVE-2026-60005: fix uninitialized memory read in ngx_http_regex_exec() by resetting r->ncaptures when the captures array is reallocated, so a stale capture count can no longer be used after a regex that did not match
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els15.aarch64.rpm
    sha:ea23a067b1a239238988ee4f4c85588bb1f210a6c166f723c147ec8b2be4811c
  • nginx-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:d51ccd42a1563466e15ea11e400d0adca39b9d77208c3063d5b98d4949d9b3e0
  • nginx-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:a7873f3e2b902e1b14b80f48fa14ed9dcb1106c6af9661000ac6a1fe497c598a
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:f56ee3e61580c7402564f541de46aa3646b46d7bb812f8b3ba449d354e83dc52
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:1545a4d63f7d6e7c58eb9349387e3f1b956c8162be9d69c2683295b691190c83
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.aarch64.rpm
    sha:30e51d3bd38abc9daaacf4a951644f63f94f28043f063e2fa0be86c082c71968
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:db4d190bae49af1b8bb5a88f8475f7e8cb362c8df457049bf1858519db3a4b7f
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:9a98475c9c7878b044ccd114b3bb31fb21701b13749caa861fb07b1847982542
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.aarch64.rpm
    sha:30ee7aa305a2e0ce4dd9a9e52537a25660b1c8e21be15d36a7365cb843b32923
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:a5b1ddaa5a280360f2431a49a9759c566c8108c00c83c6ff66859816be8ccbf8
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:2ffe285b463e183b0c0106d0617d5476e46ff0c26ed471c4531821950d706284
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.aarch64.rpm
    sha:8f992c6f4c5e926a07596b256151dc21ebdce2fc572ac14fda589e35ce9bfe03
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:bb07570351dfa9c9d2923e69ab1eb396a60045b0d5582b57425141d09a5af1b2
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:161f588c3debf831fd0971fc66594afda3b86c24f85d9590a000337857552331
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.aarch64.rpm
    sha:65bdb1b67ba6557718eee902a424f14bc28c8b6aca9d6394c63df2263a3c4a5f
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:a433d6cb0c189152f99d6a218e82aaef20484dc7058a5119d1f3538315f6ab1c
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:8e991ff2d33da0c626bbb08ebb300706b3acbe0cadceb69581d3a7f4fa5430da
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.aarch64.rpm
    sha:a7159108d91b621dfb677a940da9fa4c0a86d1c459e5418552445c3fb47f6ddf
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:3ad32bebc34e10af85e5e40efcd76a632a6267928873ea9fd063da519d3760ee
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:9fafc204a76d7d5a08274a4d95b805c942d21f8c587ce297b925954bc5f3d947
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.aarch64.rpm
    sha:f99d3fea8435c72d0291458fbf462082bd46a7fd69ee5625935555a1763581fd
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:c907e77ac577fe2ff3aa4cf324edabd927c55281a1f5a20ca261d53d6b9c848c
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:c05498389ac843807e4c22d6a593cec4164937eea04f206727a0c701aa497bb9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.