[CLSA-2026:1784800609] nginx: Fix of CVE-2026-42533
Type:
security
Severity:
Low
Release date:
2026-07-23 09:57:15 UTC
Description:
- CVE-2026-42533: add script engine buffer-overrun protection to fix heap overflow and info-leak via regex map capture variables
CVEs fixed:
Updated packages:
  • nginx-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.x86_64.rpm
    sha:da7888bdac541075fdd9785dd0b2c1f71cfaf44898d03de0ffb4cac86cfd18a0
  • nginx-all-modules-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.noarch.rpm
    sha:0faf9c32d61c90d31e61013a5966823b9324cc6151188634ec95284bc00a66bd
  • nginx-filesystem-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.noarch.rpm
    sha:792b0a9d262983000e705b46604e004cde9d87bbb14a54e4b7c4e11899b7ea37
  • nginx-mod-http-image-filter-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.x86_64.rpm
    sha:2781e00e1b590f3dd3c17539f9793775da9bc2a9e6a55838dfbb66368ca58b4a
  • nginx-mod-http-perl-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.x86_64.rpm
    sha:7f32c4935475f5604a6dc5a7fabd3011604a91a01e8f19ced6fc1427676457f4
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.x86_64.rpm
    sha:d5f31d2dd1f0e9fbc25f9cb79c490d7b05e58e6896f871e5dcc5b6269c72ecc2
  • nginx-mod-mail-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.x86_64.rpm
    sha:e3b785ec7d653619d51c28dd132d09df8b21b9933bceb629dcef03be37da5ca2
  • nginx-mod-stream-1.14.1-9.module_el8.5.0+2450+0e1114d9.tuxcare.els12.x86_64.rpm
    sha:a9b2e3d2effc2fd8b4f9e5c80632c2168604000ae11c10c6087db7375a49ea92
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.