Skip to content
Fedora 44 nginx-mod-modsecurity Critical Update for CVE-2026

Fedora 44 nginx-mod-modsecurity Critical Update for CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 23, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

The ModSecurity-nginx connector is the connection point between nginx and

libmodsecurity (ModSecurity v3). Said another way, this project provides a

communication channel between nginx and libmodsecurity. This connector is

required to use LibModSecurity with nginx.

The ModSecurity-nginx connector takes the form of an nginx module. The module

simply serves as a layer of communication between nginx and ModSecurity

nginx-mod-fancyindex: Rebuild for 1.30.4 nginx-mod-modsecurity: Rebuild for 1.30.4 nginx-mod-naxsi: Rebuild for 1.30.4 nginx-mod-headers-more: Rebuild for 1.30.4 nginx-mod-brotli: Rebuild for 1.30.4 nginx-mod-js-challenge: Rebuild for 1.30.4 nginx-mod-vts: Rebuild for 1.30.4 nginx: update to 1.30.4 fixes CVE-2026-42533, CVE-2026-60005, CVE-2026-56434

* Sun Jul 19 2026 Felix Kaechele - 1.0.4-16 - Rebuild for 1.30.4 * Thu Jul 16 2026 Fedora Release Engineering - 1.0.4-15 - Rebuilt for * Wed Jul 8 2026 Joe Orton - 1.0.4-14 - Rebuild.

* Sun Jul 19 2026 Felix Kaechele - 1.0.4-16 - Rebuild for 1.30.4 * Thu Jul 16 2026 Fedora Release Engineering - 1.0.4-15 - Rebuilt for * Wed Jul 8 2026 Joe Orton - 1.0.4-14 - Rebuild.

[ 1 ] Bug #2501307 - CVE-2026-42533 nginx: NGINX: Arbitrary code execution via crafted HTTP requests [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-60fc198d3b' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

Extracted Entities

Attack Types (1)

Platforms (1)

Tools (1)