Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-all-modules | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-core | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-filesystem | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-mod-devel | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-mod-http-image-filter | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-mod-http-perl | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-mod-http-xslt-filter | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-mod-mail | 2:1.26.3-1.el10_0.9 |
| Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 | nginx-mod-stream | 2:1.26.3-1.el10_0.9 |
Vulnerabilities 1
-
High 8.1
NGINX ngx_http_rewrite_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2477116
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17790.json
-
report
https://access.redhat.com/security/cve/CVE-2026-42945
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-42945
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42945
-
article
https://depthfirst.com/nginx-rift
-
article
https://my.f5.com/manage/s/article/K000161019