Back Linuxsecurity

Fedora 43 Major Update for nginx-mod

Linuxsecurity •LinuxSecurity Advisories • June 27, 2026

nginx-mod-headers-more: Rebuild for 1.30.3 nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-vts: Rebuild for 1.30.3 nginx-mod-modsecurity: Rebuild for 1.30.3 nginx-mod-fancyindex: Rebuild for 1.30.3 nginx-mod-naxsi: Rebuild for 1.30.3 nginx: update to 1.30.3 fixes CVE-2026-42055, CVE-2026-42530 and CVE-2026-48142

* Wed Jun 17 2026 Felix Kaechele - 0.6.0-6 - Rebuild for 1.30.3

Fedora Update Notification FEDORA-2026-9d7328702e 2026-06-27 00:54:50.049683+00:00 Name : nginx-mod-fancyindex Product : Fedora 43 Version : 0.6.0 Release : 6.fc43 URL : Summary : Nginx FancyIndex module Description : The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: * Custom headers. Either local or stored remotely. * Custom footers. Either local or stored remotely. * Add you own CSS style rules. * Allow choosing to sort elements by name (default), modification time, or size; both ascending (default), or descending.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d7328702e' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE Fixes Released for Fedora Nginx Modules On June 17, 2026, multiple critical vulnerabilities (CVE-2026-42055, CVE-2026-42530, CVE-2026-48142) affecting Fedora's Nginx modules were disclosed. These vulnerabilities allow for potential remote code execution and denial-of-service attacks. The affected modules include nginx-mod-fancyindex, nginx-mod-modsecurity, nginx-mod-headers-more, nginx-mod-brotli, nginx-mod-naxsi, nginx-mod-js-challenge, and nginx-mod-vts. Users of Fedora 43 and 44 are urged to update their systems immediately to mitigate these risks. The updates address the vulnerabilities and provide necessary patches. The first public proof-of-concept (PoC) for these vulnerabilities emerged on June 19, 2026, heightening the urgency for system administrators to apply the updates. As of June 27, 2026, the updates are available for installation via the 'dnf' package manager. 15 sources 73

Extracted Entities

CVEs (3)

CVE-2026-42055 CVE-2026-42530 CVE-2026-48142