Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-6906

Опубликовано: 07 апр. 2026
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2026-6906: nginx security update (IMPORTANT)

[2:1.26.3-2.0.1.1]

  • Reference oracle-indexhtml within Requires [Orabug: 33802044]

[2:1.26.3-6]

  • Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files

[2:1.26.3-5]

  • Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled

[2:1.26.3-4]

  • Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file

[2:1.26.3-3]

  • Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

nginx

1.26.3-2.0.1.el10_1.1

nginx-all-modules

1.26.3-2.0.1.el10_1.1

nginx-core

1.26.3-2.0.1.el10_1.1

nginx-filesystem

1.26.3-2.0.1.el10_1.1

nginx-mod-devel

1.26.3-2.0.1.el10_1.1

nginx-mod-http-image-filter

1.26.3-2.0.1.el10_1.1

nginx-mod-http-perl

1.26.3-2.0.1.el10_1.1

nginx-mod-http-xslt-filter

1.26.3-2.0.1.el10_1.1

nginx-mod-mail

1.26.3-2.0.1.el10_1.1

nginx-mod-stream

1.26.3-2.0.1.el10_1.1

Oracle Linux x86_64

nginx

1.26.3-2.0.1.el10_1.1

nginx-all-modules

1.26.3-2.0.1.el10_1.1

nginx-core

1.26.3-2.0.1.el10_1.1

nginx-filesystem

1.26.3-2.0.1.el10_1.1

nginx-mod-devel

1.26.3-2.0.1.el10_1.1

nginx-mod-http-image-filter

1.26.3-2.0.1.el10_1.1

nginx-mod-http-perl

1.26.3-2.0.1.el10_1.1

nginx-mod-http-xslt-filter

1.26.3-2.0.1.el10_1.1

nginx-mod-mail

1.26.3-2.0.1.el10_1.1

nginx-mod-stream

1.26.3-2.0.1.el10_1.1

Связанные уязвимости

rocky
26 дней назад

Important: nginx:1.26 security update

rocky
28 дней назад

Important: nginx:1.24 security update

rocky
27 дней назад

Important: nginx:1.24 security update

rocky
27 дней назад

Important: nginx security update

oracle-oval
25 дней назад

ELSA-2026-7343: nginx:1.26 security update (IMPORTANT)