ELSA-2026-18063

ELSA-2026-18063 - nginx security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-05-19

Description

[2:1.26.3-2.0.1.el10_1.2]
- Reference oracle-indexhtml within Requires [Orabug: 33802044]

[2:1.26.3-8]
- Fix release number

[2:1.26.3-7]
- Resolves: RHEL-176217 - nginx: NGINX: Arbitrary Code

[2:1.26.3-6]
- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
Code Execution via specially crafted MP4 files

[2:1.26.3-5]
- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
undisclosed requests when ngx_mail_auth_http_module is enabled

[2:1.26.3-4]
- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
to memory corruption via crafted MP4 file

[2:1.26.3-3]
- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
file modification via buffer overflow in ngx_http_dav_module

Related CVEs

CVE-2026-42945

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	nginx-1.26.3-2.0.1.el10_1.2.src.rpm	65860bf5fe79efd00333ae1672d0226d260b4eef8857b159eaeb593f9b28dae5	-	ol10_aarch64_appstream
	nginx-1.26.3-2.0.1.el10_1.2.src.rpm	65860bf5fe79efd00333ae1672d0226d260b4eef8857b159eaeb593f9b28dae5	-	ol10_aarch64_codeready_builder
	nginx-1.26.3-2.0.1.el10_1.2.aarch64.rpm	610e35079d6650187b23f6994465aee39d1d83385407a4d3897a39ed1c7e1313	-	ol10_aarch64_appstream
	nginx-all-modules-1.26.3-2.0.1.el10_1.2.noarch.rpm	f40aa62c653e8d7231e84c16695cebc1a927f5f256f4e296dd93a1d7b2e57fb8	-	ol10_aarch64_appstream
	nginx-core-1.26.3-2.0.1.el10_1.2.aarch64.rpm	7075b21675f86f603acf1929cd426488cc2ecda4eb74e7d5fe8cd9cfffcf098f	-	ol10_aarch64_appstream
	nginx-filesystem-1.26.3-2.0.1.el10_1.2.noarch.rpm	0ee7f9b2b491457024b7b96e6ef45be9ff261c62b681467651371ea31339ade7	-	ol10_aarch64_appstream
	nginx-mod-devel-1.26.3-2.0.1.el10_1.2.aarch64.rpm	f7329df247982c13d6c92110f909a979018e73ec4b5dc10db79f03ad5bc3f9e6	-	ol10_aarch64_codeready_builder
	nginx-mod-http-image-filter-1.26.3-2.0.1.el10_1.2.aarch64.rpm	d05b2a7a68664819b412511cd876b96d2d810bf6849b110d26ef618a4ddfbec1	-	ol10_aarch64_appstream
	nginx-mod-http-perl-1.26.3-2.0.1.el10_1.2.aarch64.rpm	9ec0281369508020cd97523449b37f3bdf60626f628bb58304d1cd33cd1b39f8	-	ol10_aarch64_appstream
	nginx-mod-http-xslt-filter-1.26.3-2.0.1.el10_1.2.aarch64.rpm	299572c38680d0640637c3571f7dd1a9fd8190606fdf5dccaf29e9493be56b1d	-	ol10_aarch64_appstream
	nginx-mod-mail-1.26.3-2.0.1.el10_1.2.aarch64.rpm	575d5b82134c83fcbb83dcf62e834dce354af6bf5305a8ae157deca11a6ed89d	-	ol10_aarch64_appstream
	nginx-mod-stream-1.26.3-2.0.1.el10_1.2.aarch64.rpm	e6235fa33553d131996606d3bcfe7582e2ee11301d747ce7584d5694144202fb	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	nginx-1.26.3-2.0.1.el10_1.2.src.rpm	65860bf5fe79efd00333ae1672d0226d260b4eef8857b159eaeb593f9b28dae5	-	ol10_x86_64_appstream
	nginx-1.26.3-2.0.1.el10_1.2.src.rpm	65860bf5fe79efd00333ae1672d0226d260b4eef8857b159eaeb593f9b28dae5	-	ol10_x86_64_codeready_builder
	nginx-1.26.3-2.0.1.el10_1.2.x86_64.rpm	a1c7e2d98d67ace210ddf0e6ba5e33db722658326d2d5b3a5a179a5e12dc53d3	-	ol10_x86_64_appstream
	nginx-all-modules-1.26.3-2.0.1.el10_1.2.noarch.rpm	f40aa62c653e8d7231e84c16695cebc1a927f5f256f4e296dd93a1d7b2e57fb8	-	ol10_x86_64_appstream
	nginx-core-1.26.3-2.0.1.el10_1.2.x86_64.rpm	10feb83645ca05571913fab7374ddb3197c3e196b921c7b8a6b3c8cd59d011cd	-	ol10_x86_64_appstream
	nginx-filesystem-1.26.3-2.0.1.el10_1.2.noarch.rpm	0ee7f9b2b491457024b7b96e6ef45be9ff261c62b681467651371ea31339ade7	-	ol10_x86_64_appstream
	nginx-mod-devel-1.26.3-2.0.1.el10_1.2.x86_64.rpm	a6b79e9302fb9d7764a87a6d915669fedbf318446d86618050f1468258254684	-	ol10_x86_64_codeready_builder
	nginx-mod-http-image-filter-1.26.3-2.0.1.el10_1.2.x86_64.rpm	679560d43c778e3887cc921eedcb849f977d50d204c1b4a1de7f0407e6d8de72	-	ol10_x86_64_appstream
	nginx-mod-http-perl-1.26.3-2.0.1.el10_1.2.x86_64.rpm	093c79f3c32fdd314e5e2994bff9a620d53b10a61e0ef74cf4cfaafbe52e9e6c	-	ol10_x86_64_appstream
	nginx-mod-http-xslt-filter-1.26.3-2.0.1.el10_1.2.x86_64.rpm	f99f6d3038f4f4d5f01ed4a2035bbe3128d862f7a68961ebb64d00edc0c586e3	-	ol10_x86_64_appstream
	nginx-mod-mail-1.26.3-2.0.1.el10_1.2.x86_64.rpm	eca35508d7e8f5c8cb67a59eb5622e0bf3b71b455874d303081fee7cedba5516	-	ol10_x86_64_appstream
	nginx-mod-stream-1.26.3-2.0.1.el10_1.2.x86_64.rpm	44bd82dd7dfd9484afed55d8d6aad5f01b531ec441ac63ca12c4daa33be4ae04	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team