Back Linuxsecurity

Fedora 44 nginx-mod-naxsi Security Patch FEDORA-2026

Linuxsecurity •LinuxSecurity Advisories • June 27, 2026

nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-fancyindex: Rebuild for 1.30.3 nginx-mod-vts: Rebuild for 1.30.3 nginx-mod-modsecurity: Rebuild for 1.30.3 nginx-mod-headers-more: Rebuild for 1.30.3 nginx-mod-naxsi: Rebuild for 1.30.3 nginx-mod-js-challenge: Rebuild for 1.30.3 nginx: update to 1.30.3 fixes CVE-2026-42055, CVE-2026-42530 and CVE-2026-48142

* Wed Jun 17 2026 Felix Kaechele - 1.6-19 - Rebuild for 1.30.3

Fedora Update Notification FEDORA-2026-b8e751787c 2026-06-27 01:10:00.374795+00:00 Name : nginx-mod-naxsi Product : Fedora 44 Version : 1.6 Release : 19.fc44 URL : Summary : nginx web application firewall module Description : naxsi is an nginx module that provides score based Web Application Firewall (WAF) abilities in a highly granular fashion.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b8e751787c' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE Fixes Released for Fedora Nginx Modules On June 17, 2026, multiple critical vulnerabilities (CVE-2026-42055, CVE-2026-42530, CVE-2026-48142) affecting Fedora's Nginx modules were disclosed. These vulnerabilities allow for potential remote code execution and denial-of-service attacks. The affected modules include nginx-mod-fancyindex, nginx-mod-modsecurity, nginx-mod-headers-more, nginx-mod-brotli, nginx-mod-naxsi, nginx-mod-js-challenge, and nginx-mod-vts. Users of Fedora 43 and 44 are urged to update their systems immediately to mitigate these risks. The updates address the vulnerabilities and provide necessary patches. The first public proof-of-concept (PoC) for these vulnerabilities emerged on June 19, 2026, heightening the urgency for system administrators to apply the updates. As of June 27, 2026, the updates are available for installation via the 'dnf' package manager. 15 sources 73

Extracted Entities

CVEs (3)

CVE-2026-42055 CVE-2026-42530 CVE-2026-48142