Back Linuxsecurity

Fedora 44 nginx-mod-headers-more Patch CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 27, 2026

nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-fancyindex: Rebuild for 1.30.3 nginx-mod-vts: Rebuild for 1.30.3 nginx-mod-modsecurity: Rebuild for 1.30.3 nginx-mod-headers-more: Rebuild for 1.30.3 nginx-mod-naxsi: Rebuild for 1.30.3 nginx-mod-js-challenge: Rebuild for 1.30.3 nginx: update to 1.30.3 fixes CVE-2026-42055, CVE-2026-42530 and CVE-2026-48142

* Wed Jun 17 2026 Felix Kaechele - 0.39-11 - Rebuild for 1.30.3

Fedora Update Notification FEDORA-2026-b8e751787c 2026-06-27 01:10:00.374795+00:00 Name : nginx-mod-headers-more Product : Fedora 44 Version : 0.39 Release : 11.fc44 URL : Summary : This module allows adding, setting, or clearing specified input/output headers Description : This module allows adding, setting, or clearing specified input/output headers. This is an enhanced version of the standard headers module because it provides more utilities like resetting or clearing "builtin headers" like Content-Type, Content-Length, and Server.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b8e751787c' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE Fixes Released for Fedora Nginx Modules On June 17, 2026, multiple critical vulnerabilities (CVE-2026-42055, CVE-2026-42530, CVE-2026-48142) affecting Fedora's Nginx modules were disclosed. These vulnerabilities allow for potential remote code execution and denial-of-service attacks. The affected modules include nginx-mod-fancyindex, nginx-mod-modsecurity, nginx-mod-headers-more, nginx-mod-brotli, nginx-mod-naxsi, nginx-mod-js-challenge, and nginx-mod-vts. Users of Fedora 43 and 44 are urged to update their systems immediately to mitigate these risks. The updates address the vulnerabilities and provide necessary patches. The first public proof-of-concept (PoC) for these vulnerabilities emerged on June 19, 2026, heightening the urgency for system administrators to apply the updates. As of June 27, 2026, the updates are available for installation via the 'dnf' package manager. 15 sources 73

Extracted Entities

Fedora 44 nginx-mod-headers-more Patch CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (3)

Tools (1)