[CLSA-2026:1789728955] nginx: Fix of CVE-2026-1642
Type:
security
Severity:
Important
Release date:
2026-09-18 22:58:55 UTC
Description:
- CVE-2026-1642: reject a plain text response read from an SSL-enabled upstream before the TLS handshake has started, preventing data injection by a man-in-the-middle on the upstream connection
CVEs fixed:
Updated packages:
  • nginx-1.20.1-10.el7.tuxcare.els8.x86_64.rpm
    sha:9fa9594c4c93b7c121ebbf39b7266c565eafceb9fabf914d4090812ce47529b6
  • nginx-all-modules-1.20.1-10.el7.tuxcare.els8.noarch.rpm
    sha:9f95db44c615ee54d40bdcf8bf05ef1714ec9016353c59597f5814edd6f17adc
  • nginx-filesystem-1.20.1-10.el7.tuxcare.els8.noarch.rpm
    sha:285db786fd8733290dbe61898858cd2ccfe93bebbbab2fade74dff11bfea9b23
  • nginx-mod-devel-1.20.1-10.el7.tuxcare.els8.x86_64.rpm
    sha:7a46306a129309d45b20ab7a088506abbfb9c8790ce7ec49ddb2565fa01595ca
  • nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els8.x86_64.rpm
    sha:717db40fb51e43c2c1300b70adac9ef7594b1089a5f13f0a463a5f7586829eb4
  • nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els8.x86_64.rpm
    sha:b6d3c8f23ee37f75ef0d34ce911411563b1dc952943d5d353eecfd4781e86483
  • nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els8.x86_64.rpm
    sha:edb72824ec197a40c6ed3cf61195e959180d292aa57a809f3ee0e581ac6df95b
  • nginx-mod-mail-1.20.1-10.el7.tuxcare.els8.x86_64.rpm
    sha:19b9aeb5a101411fef39070bb9e5a1ddb97d9e1b80af572709a8eee3c8436f3d
  • nginx-mod-stream-1.20.1-10.el7.tuxcare.els8.x86_64.rpm
    sha:76c0483d0961863425b8345eb3acc4e5587cf113b7d6e710c8bdb63d4e9dbbb5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.