[CLSA-2026:1785413587] nginx: Fix of CVE-2026-42533
Type:
security
Severity:
Important
Release date:
2026-07-30 13:29:24 UTC
Description:
- CVE-2026-42533: add script-engine buffer overrun protection to fix heap buffer overflow when a map regex capture (or a non-cacheable variable) is used in a string expression
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:4e70b1d3231e2700556dbca7185c09da51fc64215fbc36657d7ec133b56dbed5
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els6.noarch.rpm
    sha:772c3a42ec78ab5e83159216a6b1d8312e9717f6d11531d94f22e05207bd20d0
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els6.noarch.rpm
    sha:7bd4468c54ffb513393e2cc86a47200d7366e21c2b62a0567fd03a22f9e23999
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:35555de99c394d9ae3e796fe43cf9e49a3234e5d84fe5aa8e5b457d9cd977dbc
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:3efc4830cf0518b0dbb9aba0d4be96ee90399cba80c18ce02f0a3311375d68b7
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:a31df792e4a4837bf726079936f4d3c7afbad9b7a9738c8b3f986835a510b910
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:cb4182d4f06d803126eb3d8aa0732ec063e8e72e67a291b309ae1b4fba33b6a2
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:ea1ec15c0bdc6cba634cc20b846411ff6df592ddada14c3c9ba237bbae0620ee
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:762f126c77de1e45febf25544de979953dd54cf73403d8296d004faff8a2bced
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.