[ALSA-2026:98671] Important: nginx:1.24 security update
Type:
security
Severity:
important
Release date:
2026-11-11
Description:
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename (CVE-2026-15176) * nginx: NGINX ngx_http_core_module vulnerability (CVE-2026-97205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nginx-mod-mail-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.aarch64.rpm 06a186c10c5486797c5c481ca1ba79251f2f8d6fcc4352bf679dbe1bbbf1f8ba
aarch64 nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.aarch64.rpm 1e291cc170494e390aed880baf21f460c807251fbe4c9a267be62ac8d9a95260
aarch64 nginx-mod-devel-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.aarch64.rpm 60fc2e57df4a5e7cf785c2b39ce05f00847d18538e656d6144cfc60336421904
aarch64 nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.aarch64.rpm 9c6590e02b8299056fcf334c8396c25cc83c932e3fb798e6d99f69e8d11389ac
aarch64 nginx-mod-stream-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.aarch64.rpm 9fd1ff38aa66c9cf4247ec236aaac4c721e28679f2e399db1dacdc89cbdcd6ca
aarch64 nginx-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.aarch64.rpm ace72a7831b583df7b9bef181346551025d53c5c7148ae61a66a462762bb7493
aarch64 nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.aarch64.rpm cd6c753a53d18123c34d063f043dc6f142b614067f0705f2190b40a5e2a59a49
noarch nginx-filesystem-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.noarch.rpm 33966b6786bc5436faae1c38450eaf1f3f1e102dcfe5c6057ae14ad189eafe78
noarch nginx-all-modules-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.noarch.rpm a675ee3bf78d09db013d5ff54d553483e2375fd148d8cdccc480277d737e02d7
ppc64le nginx-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.ppc64le.rpm 149583886ac441dba2252669ca32b2936c820472a4c060896de72a01f880a6f9
ppc64le nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.ppc64le.rpm 4828ee5646b90f6754d1ab5f55e1d792ff8d05b4db9deb371e051f1ff64b33bd
ppc64le nginx-mod-mail-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.ppc64le.rpm 60cb5e728d2fc1b236304bab5d40ae60bcd15a15bc70ff66ea8bcfa7ae8d04da
ppc64le nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.ppc64le.rpm 77d6e6adfa3249805977ea776a9f81806d932904f2dd31c6f8e3d1048ce41606
ppc64le nginx-mod-devel-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.ppc64le.rpm a04b10fab06165df45eb5cfb223ec75736eba2d7702c2e513d87a8016cfe389e
ppc64le nginx-mod-stream-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.ppc64le.rpm bf6d0c101893513b0c77f6fc62463d2b2c26b17855882f46bcacb56273c926c2
ppc64le nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.ppc64le.rpm e46a7361a236aaa5a3710b97ed641acd4a0e3eb08c3981e25164a95aff5f6e71
s390x nginx-mod-mail-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.s390x.rpm 13843132337106d13fe13abd00bc76118c585b0b589879ecb5b8c4c0c2ffa60f
s390x nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.s390x.rpm 19ff848718ad4fe29197503f1992625994e1990bc37221ae27d4698147358c60
s390x nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.s390x.rpm 363d388ebdddf08b82d79cce1b921a8df4fc8419b5fbb908850d5f20a6f3656a
s390x nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.s390x.rpm 4aea823a1f551fe940f67cbbdb4d2a4484299ab82d63973adb6b54514fc5b44a
s390x nginx-mod-devel-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.s390x.rpm 57132196e0f3310f0e3e9eced441c03ddaefa7c2dcd67209ff530d93f7621ad2
s390x nginx-mod-stream-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.s390x.rpm bd47ba0f665bbee9a869fc232f0fa2110afcfb58bc0a712c9e731d8197082402
s390x nginx-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.s390x.rpm e9aaf22df8ed181dadfc8c92cfbdf7fbfcc788bac1440b09104fac5affce51ee
x86_64 nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.x86_64.rpm 55b5bc68b1624273dd404f4450619a9d099ae30fc6a9e4f315b6dd655d2e2a9b
x86_64 nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.x86_64.rpm 58e81d156efa1c96a9fb73b52ee3c8f7aeeb21f1cce8c821d281c06a476965bb
x86_64 nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.x86_64.rpm 86ec6774ac1c738337c2c99de7aeba882f7559054b45b8fa46e87b39cf98441d
x86_64 nginx-mod-mail-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.x86_64.rpm 89e146845b315855f2422f5c79589c993b288fa59811f010dd73d45fff94c283
x86_64 nginx-mod-devel-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.x86_64.rpm a1e9dd8758ffdd5005d9e3d4492a08a125921fd3c16e57573d9bbbee1e9aca5c
x86_64 nginx-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.x86_64.rpm ba741170f33d0f8a29e02183eec1c939a27dbe8e2b039e1aea2b80140d00a837
x86_64 nginx-mod-stream-1.24.0-3.module_el8.10.0+4360+5035a360.6.alma.2.x86_64.rpm c389b7f5fb76e03d390c44a28f703c09cfab732cf7bb926a43fd1f638361b3d6
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.