[CLSA-2026:1793027758] nginx: Fix of CVE-2026-60005
Type:
security
Severity:
Important
Release date:
2026-10-26 16:29:07 UTC
Description:
- CVE-2026-60005: fix uninitialized memory read in ngx_http_regex_exec() by resetting r->ncaptures when the captures array is reallocated, so a stale capture count can no longer be used after a regex that did not match
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:8dc404ca8bb6a6ebeeb2c302111a6738f18cc6503bbebb2a14d196f673c068ef
  • nginx-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:91b5dea3d1c405dfcf2e68eb30abc3d765f5a00e855f221d1af4d1d8a51066de
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:b45f751cbafa41746e957b0ef8449eeb9725275ab75fb842578dd6cc39389651
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:57c0822d599b5c575fda977262d4dfe3d3e9424d4c1f87fede9cb893302ff7bd
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:f2bd74d8bb6a1a77ac2731c4b4f25c36d92d8866e7e16180e0a1d4d98b464241
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:e804f4fba372d3bfb9e97ae84b269f5a96fe46663806661a33688854d1f23ef8
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:2bd4b2cab6d5f0417427d2d5d5e758910203ce95204a31ec9b59ad718ac4a177
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:fa314397be3bb0ccf87451afaa2783e404e7505d07b3b8d27d6aebc3a15e0a76
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:17f7735d465cef4727b1fdc04a314d8dec930478b4b0ff23f5378d827d789ed9
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:714f9d24288c80ce6122cde9177649451bad05839a92ae1ce6e7dd0d1cdf1af5
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:d8aaec6f9767ba7210ea5051b58fb5a764b7dae645b501d5c7408080a26b456d
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:c52ad133cb3e7584b49a95c7490711b7fabc305019973e66685ec071087248e5
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:8391f70daf1e0b0abf4df5b5c25b9420b482e9e152c3a386e42675f6a7f8131c
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:b12b4b441046c67df090af59a7ed94436994dd5fe19e25619335787bea335cca
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:1214f04892df6712f13ae6385c91de195fda85ce4f86301bd901daa1bec4b6c5
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:4411058a465f52c67a9837cfd9fa9658099fff877b3adece0a9d647c9a2fa387
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.