[CLSA-2026:1793021002] nginx: Fix of CVE-2026-60005
Type:
security
Severity:
Important
Release date:
2026-10-26 13:23:32 UTC
Description:
- CVE-2026-60005: fix uninitialized memory read in ngx_http_regex_exec() by resetting r->ncaptures when the captures array is reallocated, so a stale capture count can no longer be used after a regex that did not match
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:6009f5a111b956125b5578d5f0dda115b09800f17a6bb3b3ff49ec90f907b8b1
  • nginx-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:7b320c02089b8a07324a21f9eedaad1a72fa73031b4e1c89a91136ebdeade815
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:01aabda40567e772c490ad333e7282d33309e625dc6b72d6287e2fec6deb109d
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els15.noarch.rpm
    sha:83142ad70db1e0cc88bfa4581d42ed0282f64f8f90a9161042a852c72f904739
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:98ec96aad071b4e01d2a7405b224bda43ec9df2aaab3e032610dbf795f23e6ff
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:f8e79d40d9f2f32c97dd356b94e721c98ed4ddbee38e2be4d4f7c5fafeef85d3
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:1f9ea48964935877f3cb82e60a2be64d6c2f86557bc0c6bb17c877e5fda971cc
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:dad82eb2a0de99e9b0ddcd65198749188cf82dfbcee0ed6fa5269fa7e1038dd5
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:45365505298c5d622c1da43bcf15a253bf631f81a4e23b0a0f86ce416ae22a3c
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:4c45144db4bfd14d42dad1c31a3a14f9719696bdaa8614a441dea597c0265a6a
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:bea3292a63e94b7296026e624170839d432f366193a6410530f41887c9924c42
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:75b6089ff717149ca8b1d1aebc946e08f9ad641888a88702298db1645c50e011
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:2613dc7fbf553f39801ec8378c4422f79a59f3d2665982cdf3482a38df08793f
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:118972f2c9282853fd4cb682df533607d7c15f0c5c1da05c6011ddc40ae98de8
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.i686.rpm
    sha:1c2e7d82bf9cd7bd12f7cba7614cea1de85544bcf7d1a0c003ccd414df6f9960
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els15.x86_64.rpm
    sha:79b89a5511119e65a35743f2c8d6d6bab4af8ae573014f9b7e67c3d375ed38f8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.