[ol9_appstream] nginx-1:1.24.0-5.0.1.module+el9.7.0+90864+a04e5d5f.2.x86_64

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and
IMAP protocols, with a strong focus on high concurrency, performance and low
memory usage.

Changelog (Show File list) (Show related packages)

• Wed Apr 08 2026 EL Errata <el-errata_ww@oracle.com> - 1.24.0-5.2.0.1

  - Reference oracle-indexhtml within Requires [Orabug: 33802044]
  - Remove Red Hat references [Orabug: 29498217]

• Fri Mar 27 2026 Zdenek Dohnal <zdohnal@redhat.com> - 1:1.24.0-5.2

  - Resolves: RHEL-157886 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of
    Service or Code Execution via specially crafted MP4 files
  - Resolves: RHEL-159445 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of
    Service via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-159558 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of
    Service or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159537 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of
    Service due to memory corruption via crafted MP4 file

• Thu Feb 19 2026 Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5.1

  - Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)

• Thu Mar 27 2025 Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5

  - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)

• Tue Jul 16 2024 Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-4

  - Resolves: RHEL-49350 - nginx worker processes memory leak

• Thu Jun 13 2024 Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-3

  - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx

• Thu May 23 2024 Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-2

  - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set