[CLSA-2026:1794394071] Fix CVE(s): CVE-2026-97205
Type:
security
Severity:
Critical
Release date:
2026-11-11 10:48:03 UTC
Description:
* SECURITY UPDATE: use-after-free when the 8-bit r->main->blocked counter wraps with 256 asynchronous operations pending on a request - debian/patches/CVE-2026-97205.patch: limit pending operations per request to NGX_HTTP_MAX_BLOCKED; perform file reads synchronously or refuse the operation once the limit is reached - CVE-2026-97205
CVEs fixed:
Updated packages:
  • libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:db0eaf5cfaf5a2dbd8b502264f62a302f91d3799
  • libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:92a3c9def39944bbc7c75e07a6b7bf1e24cd33e6
  • libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:0150615c2e5cccf8cff3b3d3f5a871d3c36f7f32
  • libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:668415252f39508cedca6d7b5d40503e10738040
  • libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:a519c2f6822c652a0ad00a413fdf98713b1787a6
  • libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:ad5c363a33d73bab219e876ef660d999dadc4a88
  • libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:e9d05e9fbf7c74b56655650178055256506de64a
  • libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:e28f528e931829bf39fa047c6e5c785a08ca051f
  • libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:84ca254721a29e473262f7563ee10d606eb3d98f
  • libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:8c44e1f827c8704677f149c1ae7a17477d2a3002
  • libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:19e0bcd585f26f98131342c648316a844d1163d3
  • libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:e8bf773c673a3f0f7cf0cc4b304e71a514f840ac
  • libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:f4d7b3978844561c7baebbd6dd7ba5ecb1d862b9
  • libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:27765c06e54f18469dec7c7f5ebfb52291975c9c
  • libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:438fe56ddd4a24f5c8db0eac4619494b20e93733
  • libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:5b7b809b959e4619b869e67122f55be335ce8966
  • libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:cfe7ff1aa77285ccb6c62b556d7b66850c78305b
  • libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:1951b87d552798e247d6fdc1cc554677a683f42c
  • libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:e1d68da267ee141cbbb7994c37417477acc0a79a
  • nginx_1.14.2-2+deb10u5+tuxcare.els12_all.deb
    sha:0c6c0ec0e0e7b9b3a13f3871508e460eb1d2f216
  • nginx-common_1.14.2-2+deb10u5+tuxcare.els12_all.deb
    sha:b14a1f234f526102a31cc42defbb792fc8569c93
  • nginx-doc_1.14.2-2+deb10u5+tuxcare.els12_all.deb
    sha:100abf811ef3965655252a26343e771bc9f5fec9
  • nginx-extras_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:1cfd5f8670a52f416c07bdf944933524c421f3f6
  • nginx-full_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:5f856111d07eec3961ce0c9f07bc56034c200e47
  • nginx-light_1.14.2-2+deb10u5+tuxcare.els12_amd64.deb
    sha:12adc64e7b5cbd4624bd7bb60d927ed8104a2281
  • libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:8f66620f406785c3fe8b5416db974d082d8d5b0b
  • libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:2190aad4b1c463af666ed3ae5782e53d6b2af216
  • libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:44702e8295b391d9ef03459000399719f21936be
  • libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:057f464130334c4bb70cf242683b25d7843dfb6a
  • libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:08f8a6a8b6d4636838df4198066335d8d601cc17
  • libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:7a607ce38ae29996ab87053bd43a5ac097805cc0
  • libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:3630bc125ee53b17ea514f6bc46c9210d639b85a
  • libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:f3153e8fd02040bf27f1f46b38174921f469c2e1
  • libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:25ae80fd8ec9c851bdc18d77222c3aa1bdbd5828
  • libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:70360a4a88c8d178c7a6bbc868f1e4884f939364
  • libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:7a12c0ec14d60c6c59dc3205293255f8cc2e7d3f
  • libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:bbf524ce64fef105d999a1c3aae5347d421ed037
  • libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:7c14a712dae39dd1e6339616f16c33763588f796
  • libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:740a59229962137b139228826de731a58a9ab39b
  • libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:8bdad626190da081fec8acae08082b86e2cd08c8
  • libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:1a0ec6150d5cbed95fa2430623cfe85580564d08
  • libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:47b6f0fa96b96cd150f6d84e54eaac0d39489032
  • libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:a5732d11c6ee066d4c33e5b1f3c4923885c1aa18
  • libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:d6ccfdc183eb32f3c91b96906d3d041b14901ae0
  • nginx-extras_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:0a4b371c44bab706291dfd6142c7f0c7caf7fa28
  • nginx-full_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:a7f502a707790c53ee72c870b96cb910de999e96
  • nginx-light_1.14.2-2+deb10u5+tuxcare.els12_arm64.deb
    sha:c72960974f8ca508d449a08e130465cf74e41d38
  • libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:7f3e6682f2d6f8909f2f0dbba9bb91e72f58c2ba
  • libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:116d0007a880eb2111bcf1ffacb525d5039da179
  • libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:4fa0f1cdc5a0ce997e6cd59f9406be240e709f11
  • libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:5fb435d8895e9107c84da22c04d70aad79e07f0c
  • libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:2ac7743abecd773beaefa20780616805dc240612
  • libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:cda7a2eeeaf7c406a635d31a7afe429daf13a86b
  • libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:0b0400c1033308aeff0a99046c4f64bb5e518bbb
  • libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:5306f5dae082e30c6b591f25bcfc0e50d67ff4a5
  • libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:848e39d817b57fc555b61b2a1ae97c8805dfdc49
  • libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:635d0429a035f6a86df4ac9cbc1e762587c43805
  • libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:18ef5e4bbcc39e72505f77088e09b6bf49a87420
  • libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:cc95b5d187cd20bb90b42745decb308c9fa41894
  • libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:f3c0216ff2c24ff715bd72f803a40d009e350db2
  • libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:d3fa0c85e5b0b6707a1067658e30b83539303ece
  • libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:3258c0a33fea9c8bc3112f019443983706a8382f
  • libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:5f8842d72448ad0a98fabb31b640e035eafd3756
  • libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:76523c26d669457a69ca911fca202afd883ea5ab
  • libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:ccd89b56827a963946ecc8da4375008254a817ff
  • libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:55249d20f94af955da4680fa9bcfaa6f514566b4
  • nginx-extras_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:89825e3469cafbdb3430ef818a1952089bd1dac2
  • nginx-full_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:cb683b1b3ee58ac31a98ddd31ddbe861aaf80deb
  • nginx-light_1.14.2-2+deb10u5+tuxcare.els12_armel.deb
    sha:beb52d1cc98ab47dc583995d7d6a07e505a45572
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.