Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-all-modules | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-core | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-core-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-debugsource | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-filesystem | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-devel | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-http-image-filter | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-http-image-filter-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-http-perl | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-http-perl-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-http-xslt-filter | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-http-xslt-filter-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-mail | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-mail-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-stream | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | nginx-mod-stream-debuginfo | 1:1.24.0-7.module+el9.8.0+24626+085354fc.4 |
Vulnerabilities 2
-
High 8.2
NGINX ngx_http_slice_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause…
-
Medium 6.5
NGINX ngx_http_ssi_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticat…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2500960
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2500992
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59490.json
-
report
https://access.redhat.com/security/cve/CVE-2026-56434
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-56434
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-56434
-
article
https://my.f5.com/manage/s/article/K000162098
-
report
https://access.redhat.com/security/cve/CVE-2026-60005
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-60005
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-60005
-
article
https://my.f5.com/manage/s/article/K000162100