[CLSA-2026:1784888515] nginx: Fix of CVE-2026-42533
Type:
security
Severity:
Low
Release date:
2026-07-24 10:22:20 UTC
Description:
- CVE-2026-42533: add script engine buffer-overrun protection to fix heap overflow and info-leak via regex map capture variables
CVEs fixed:
Updated packages:
  • nginx-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:350bd94a217d68c2972028cddc944055088cd571ad4c2223a716a73aeaec1bba
  • nginx-all-modules-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.noarch.rpm
    sha:0c24897b597f1605ad669107da8e591ae26e8ef1d4ccd32636a1c51209a21366
  • nginx-core-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:d7e671fcb2de97ac628a7cb9decc2c8d3f2beaa26654f06bf1227a6c2d227529
  • nginx-filesystem-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.noarch.rpm
    sha:8cb9622f8bb293c8fb441f44115be37b21ad937301b2d44eb7032af511b2966f
  • nginx-mod-devel-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:7230238eb25514f55f8a9741334d21e39cf907b01dc5e4e521b97aa403ca31c8
  • nginx-mod-http-image-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:6ad97584613edd78a0c8395990a28bcc6c45e5f32bf03d4a33654d7aff54f849
  • nginx-mod-http-perl-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:84fc207823deea14e5f3d47d076b3810e1ec3676e5aef8ead54a1707ab720702
  • nginx-mod-http-xslt-filter-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:583534bcfbd687d36d0e8a9e3f9d3334bf5eda4f686954ee1e32fda84ee9b69f
  • nginx-mod-mail-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:ec460336bd413571d8fb2a41454168f878c3a663f3a25ea1028564dbe4093098
  • nginx-mod-stream-1.20.1-22.el9_6.3.alma.2.tuxcare.els8.x86_64.rpm
    sha:d08776e5e61b03518d48f901c745096b40b73d7875d8e4904ee29438c4631ab4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.