[ol9_appstream] nginx-2:1.26.3-2.0.1.module+el9.7.0+90870+e191ebad.1.x86_64

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and
IMAP protocols, with a strong focus on high concurrency, performance and low
memory usage.

Changelog (Show File list) (Show related packages)

• Fri Apr 10 2026 David Sloboda <david.x.sloboda@oracle.com> - 2:1.26.3-2.0.1.1

  - Require oracle-indexhtml

• Wed Apr 01 2026 Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-6

  - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of
    Service or Code Execution via specially crafted MP4 files

• Wed Apr 01 2026 Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-5

  - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of
    Service via undisclosed requests when ngx_mail_auth_http_module is
    enabled

• Wed Apr 01 2026 Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-4

  - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of
    Service due to memory corruption via crafted MP4 file

• Wed Apr 01 2026 Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-3

  - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of
    Service or file modification via buffer overflow in ngx_http_dav_module

• Thu Feb 19 2026 Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-2

  - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied
    connections (CVE-2026-1642)

• Fri Feb 07 2025 Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-1

  - New version 1.26.3

• Wed Feb 05 2025 Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.2-4

  - Use systemd-sysusers

• Mon Jan 20 2025 Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.2-3

  - Fix PKCS-11 support

• Sun Jan 05 2025 Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.2-2

  - Adjust QE files