Release date:
2026-09-18 11:09:21 UTC
Description:
* SECURITY UPDATE: plain text response injection via a premature
response from an SSL-proxied upstream
- debian/patches/CVE-2026-1642.patch: reject a response received in
ngx_http_upstream_process_header before the upstream SSL handshake
has started (u->ssl set, c->ssl still NULL) and retry the next
upstream, so a man-in-the-middle on the proxy-to-upstream path can
no longer have plain text data parsed as the upstream response
- CVE-2026-1642
Updated packages:
-
libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:dd1d31b9aa0476092330302f8406e72071c61622
-
libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:3df2cbb3d36d1137c0915e047bac511457d79a73
-
libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:458e7b3431982d108b2936022c8f27fd832836ed
-
libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:3dec6ce94965f228ee6ac1b1f47e4b55d971cf15
-
libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:93cc4dc7e8cdb9cf80641c445d0a58ca804ae8a1
-
libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:bc942d1a318ea99b6ccaf83015961cd0c23c5448
-
libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:d35c26550a8103bc87d2611663921246c76bf858
-
libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:0e88345b0206c7443e2593ffe53870663f309228
-
libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:e895e12e02d552931e6121ec10507bff9b1d8728
-
libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:4332bf5f25b1d1d38a64d591dfc131a118ab4c43
-
libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:9826b04add0a657a3c02f9724b1969dd98f40322
-
libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:9406197935a43d79df2c18d5f4d5823fb424f221
-
libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:cbeaac1f4bc37eed8da01294b31eab1cd384049f
-
libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:e9fcabb6c6712608cec7a3e6ac48d69ed4254389
-
libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:68936a2a1a259c8064e8395aa0939efda2e84102
-
libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:18d43d850d21fd620f6f720500283a115e46758b
-
libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:1d8b1792e86c19e5caa9e01652bee9d842bdfc71
-
libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:7f8b65b5d52e45b888111aacf00167ce024902f2
-
libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:a6a16e2b6ddb9888c21f1890bb3264f938f89e8c
-
nginx_1.14.2-2+deb10u5+tuxcare.els5_all.deb
sha:1e3d46dee063c22481a4b331efbf836a694a0234
-
nginx-common_1.14.2-2+deb10u5+tuxcare.els5_all.deb
sha:7589fb683b4fea07e1f1b1c4e1b484898634afc7
-
nginx-doc_1.14.2-2+deb10u5+tuxcare.els5_all.deb
sha:e2190ef098ae8c64d6f1154193441a1259f117e8
-
nginx-extras_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:9864890cb06bc2c12fe67716eb897e008404a61a
-
nginx-full_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:af4a9561241164eb1b763f9c1e6a2c040c533656
-
nginx-light_1.14.2-2+deb10u5+tuxcare.els5_amd64.deb
sha:d7cb02f529ec078f5669f5afd1e6fb46ea2bdc8c
-
libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:712a5788e445bc745b0f33d16b7d2ab37d1e6f35
-
libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:55a3020a3f627df0c15021552be0707549448c16
-
libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:fd3fad277f167969470d95ef0c425481d3adf3a7
-
libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:9a249778de39c48f15d70940b7afeecda0e32397
-
libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:2b8aba83e7504141cd850d8a2387841a844a26fc
-
libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:23b16e6411eeef255e4a837f6a130ff54c7699b5
-
libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:22f4fe48eb8ee73dcafa2e95b52d08e532cfc314
-
libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:def1dadc1486b46099e87c2e0e91e5937d09979d
-
libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:1df5e11d5f7e0dd4ea44131c02c429ed0b17ba5e
-
libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:a069b204c34786d8f6aa5e13cda0fadb0e6ff879
-
libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:e580ed8730da75f1c980fb07580d2aa653372e32
-
libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:9cbdfe3fe387ccb0065eb5b64c13c5e270361d6b
-
libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:1f00d813490db180ade2afdb711af603406a7297
-
libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:300861ea4e81e62266bd33b1ee9ae39f986dd4fd
-
libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:fe5c671fb6551db033806580c4a209d9f9c8f4dd
-
libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:bf1bb89f297d2ccff1551220831578bac055e1a4
-
libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:47b440471d8768091d426dacb1bed827af7dba6f
-
libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:725d70d09090e9440481416db6e85c6b5607d079
-
libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:63a6190b8318db135b75dd34e157f07c84f649e5
-
nginx-extras_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:33086581f43e962b2ba5317c36bc9a9c87169990
-
nginx-full_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:cbeefaf291b8c3262554089cdd3f4f38e2795656
-
nginx-light_1.14.2-2+deb10u5+tuxcare.els5_arm64.deb
sha:235e4202d075f4046cd9be736738ea897201623c
-
libnginx-mod-http-auth-pam_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:712ea4ab57d430acc89f37ac2439ae63071fdc27
-
libnginx-mod-http-cache-purge_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:ec6048a504a771a8f711b131ab674d34596ce706
-
libnginx-mod-http-dav-ext_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:8dcdb9ff3d707ebe349333cd503c5b6b51f99c1e
-
libnginx-mod-http-echo_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:1d97d843f18e23f5b590ad7a417c9d4734edbe10
-
libnginx-mod-http-fancyindex_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:112940523f392e02e6194c60895b0ee842cc9710
-
libnginx-mod-http-geoip_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:660168ebb40b78eddbfa3c3e9694c2824a913e68
-
libnginx-mod-http-headers-more-filter_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:cf203d2f0dfb4f02bc5f109b6cbf6ff08a797f9e
-
libnginx-mod-http-image-filter_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:de241973d6b4fcaf68ac0e0946fa060deaecbb35
-
libnginx-mod-http-lua_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:af64e45466396121bc8f657e43e6bbd8d1b98487
-
libnginx-mod-http-ndk_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:63403f7718a0eec1a948797b306ef1ecb28eec61
-
libnginx-mod-http-perl_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:c7026827f3eb92e3e8f09a9fed11b6e18702d679
-
libnginx-mod-http-subs-filter_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:66e5cb5c9f63cf628e60efc6425db3ccfd71890e
-
libnginx-mod-http-uploadprogress_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:81c0fe0ae43b0f1b8235bb3e5d536cf2eb5c6db0
-
libnginx-mod-http-upstream-fair_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:6d586cd499f9dc33181a6db1c845fb3f438b681f
-
libnginx-mod-http-xslt-filter_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:6b40d061ebe65a44d4b4fd041097a59131fb5e1d
-
libnginx-mod-mail_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:50617f8eb62911efff83d9c6116d02b2d4899c7d
-
libnginx-mod-nchan_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:9c88c7b6025190dd463ef00ab5b1f992d8756474
-
libnginx-mod-rtmp_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:dc37c5c64a0c38024af0c77dfbed155696ecd140
-
libnginx-mod-stream_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:821b9699fbeccee07109a6b83fad7f7782bd8573
-
nginx-extras_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:04cae2ef45bdab92457bcb5b1d7a84b1cea9cab2
-
nginx-full_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:675507c775bc7e1cbc2df2e445c64a8e23c40c2a
-
nginx-light_1.14.2-2+deb10u5+tuxcare.els5_armel.deb
sha:dfd8e6203a7906623d7d864ec55568b4e2aba61d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
