Summary
[2:1.26.3-2.0.1]
- Reference oracle-indexhtml within Requires [Orabug: 33802044]
[2:1.26.3-2]
- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
on TLS proxied connections
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | nginx | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-all-modules | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-core | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-filesystem | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-mod-devel | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-mod-http-image-filter | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-mod-http-perl | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-mod-http-xslt-filter | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-mod-mail | 2:1.26.3-2.0.1.el10_1 |
| Oracle Linux · 10 | nginx-mod-stream | 2:1.26.3-2.0.1.el10_1 |
Vulnerabilities 1
-
Medium 5.9
NGINX vulnerability
A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's contro…