CLSA-2026-1792426319

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792426319
Upstream
  • CVE-2026-15176
Published
2026-10-19T16:12:09Z
Modified
2026-10-26T09:32:03Z
Summary
Fix CVE(s): CVE-2026-15176
Details
  • SECURITY UPDATE: heap buffer overflow via alias with rewrite and $request_filename
    • debian/patches/CVE-2026-15176-pre.patch: clear r->valid_location on a standalone "break" after the URI was rewritten
    • debian/patches/CVE-2026-15176.patch: reject URI to path mapping in ngx_http_map_uri_to_path() for an "alias" location once rewrite has changed the URI
    • CVE-2026-15176
References

Affected packages

TuxCare:Ubuntu:16.04
nginx

Package

Name
nginx
Purl
pkg:deb/tuxcare/nginx?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json"
nginx-common

Package

Name
nginx-common
Purl
pkg:deb/tuxcare/nginx-common?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json"
nginx-core

Package

Name
nginx-core
Purl
pkg:deb/tuxcare/nginx-core?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json"
nginx-doc

Package

Name
nginx-doc
Purl
pkg:deb/tuxcare/nginx-doc?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json"
nginx-extras

Package

Name
nginx-extras
Purl
pkg:deb/tuxcare/nginx-extras?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json"
nginx-full

Package

Name
nginx-full
Purl
pkg:deb/tuxcare/nginx-full?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json"
nginx-light

Package

Name
nginx-light
Purl
pkg:deb/tuxcare/nginx-light?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792426319.json"