Synopsis
Important: nginx:1.24 security update
Description
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.
Security Fix(es):
* nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename (CVE-2026-15176)
* nginx: NGINX ngx_http_core_module vulnerability (CVE-2026-97205)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 8 aarch64
Rocky Linux 8 x86_64
Fixes
2552352
2552359
CVEs
CVE-2026-15176
CVE-2026-97205
Affected packages
Rocky Linux 8 aarch64 - AppStream
nginx-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-debugsource-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-devel-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-http-image-filter-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-http-image-filter-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-http-perl-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-http-perl-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-http-xslt-filter-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-http-xslt-filter-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-mail-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-mail-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-stream-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
nginx-mod-stream-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.aarch64.rpm
Rocky Linux 8 x86_64 - AppStream
nginx-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.src.rpm
nginx-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-all-modules-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.noarch.rpm
nginx-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-debugsource-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-filesystem-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.noarch.rpm
nginx-mod-devel-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-http-image-filter-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-http-image-filter-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-http-perl-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-http-perl-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-http-xslt-filter-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-http-xslt-filter-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-mail-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-mail-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-stream-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm
nginx-mod-stream-debuginfo-1:1.24.0-3.module+el8.10.0+40424+5b12c67a.6.x86_64.rpm