[CLSA-2026:1784803387] nginx: Fix of CVE-2026-42533
Type:
security
Severity:
Low
Release date:
2026-07-23 10:43:31 UTC
Description:
- CVE-2026-42533: add script-engine buffer overrun protection to fix heap buffer overflow when a map regex capture (or a non-cacheable variable) is used in a string expression
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:bbfe0e1abd6a1530adbad0c97b5085aae2004df34c314e8aa7e31882a9fc82b4
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els6.noarch.rpm
    sha:dd6fe9f0bc67f7d99e75404541fd8504697cf5bd8788860e5cd06f6737d35e86
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els6.noarch.rpm
    sha:d44b0585780fdfab88fe4394440f2b26c96ae9ff8bcb10f850984232f6edc678
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:4f80126aacfa5857d9a6c90e559bbd5020d224ba291842d69766134746fe957f
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:2dd6576d4a0c29e26eaef4d4768afd35fa9e09b574ee39557f580f3cdbbefdf2
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:1cbbf322145869f74492bcc5dbcf92fcb282fca24ac5c4e88e5a3b50cb6b8374
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:2a30717276b910fff624803247a3d058acdef71edf5ee780b9612055ebb47c2d
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:a5e4d45da8d71735494f0caeaa08cdf96e4df776658b7abda646bc6f8807d157
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:386f05e43b08db862a7064c54cceabe4c2f4866d91ae039b4a0ab60c53ddc889
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.