Skip to content
OpenAdvisories
Critical ALSA-2026:19371 1 CVE

Critical: nginx:1.24 security update

Published May 19, 2026 · Updated Oct 29, 2026

Summary

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

* nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 9 nginx-all-modules 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1
AlmaLinux · 9 nginx-filesystem 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-42945
  • report
    https://bugzilla.redhat.com/2477116
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-19371.html