[CLSA-2026:1784803678] nginx: Fix of CVE-2026-42533
Type:
security
Severity:
Low
Release date:
2026-07-23 10:48:21 UTC
Description:
- CVE-2026-42533: add script-engine buffer overrun protection to fix heap buffer overflow when a map regex capture (or a non-cacheable variable) is used in a string expression
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:67d59fd9d31592030d5a11141eb31b2519b84ebd04c9d013ea2d029677b24ed7
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els6.noarch.rpm
    sha:67e9676f89d46fce447bb425ee93374490e58045f1c685378998748414492b39
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els6.noarch.rpm
    sha:7084741cef8e02ae890fa5b6023a0e581e18f00f75817a5c84873bc79059aa7c
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:16ec9dcde2fdfd55551bb75812a206afe1f9b4b606a8c97fd5738850cc6ac50a
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:ddfbd55eb870ee4917f22fef010070dd3be6150f46e66c98da66aa03c58f88e1
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:29ce7d0511c45f1c02627fd00df57092e2ecc5325cb73a756caf693a81b8c319
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:8aa438f013ee86142c245e2d4cd1c4f2d110dc605363f99e50be5f1dde7877b1
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:8ab43a633bf1c6c898c8ea6427ef6e62a43826264f8998a573234c08e5f2781a
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els6.x86_64.rpm
    sha:831f48c1fc33a47dd2dd9797df74b7dcbb0e3ed640c6ebccda0702680967f253
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.