Back Linuxsecurity

Oracle Linux 10 ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • August 26, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

[1.26.3-6.0.1.el10_2.6] - Reference oracle-indexhtml within Requires [Orabug: 33802044] [2:1.26.3-6.6] - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) [2:1.26.3-6.5] - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) [2:1.26.3-6.4] - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack [2:1.26.3-6.3] - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) [2:1.26.3-6.2] - rebuild for...

nginx-1.26.3-6.0.1.el10_2.6.x86_64.rpm nginx-all-modules-1.26.3-6.0.1.el10_2.6.noarch.rpm nginx-core-1.26.3-6.0.1.el10_2.6.x86_64.rpm nginx-filesystem-1.26.3-6.0.1.el10_2.6.noarch.rpm nginx-mod-devel-1.26.3-6.0.1.el10_2.6.x86_64.rpm nginx-mod-http-image-filter-1.26.3-6.0.1.el10_2.6.x86_64.rpm nginx-mod-http-perl-1.26.3-6.0.1.el10_2.6.x86_64.rpm nginx-mod-http-xslt-filter-1.26.3-6.0.1.el10_2.6.x86_64.rpm nginx-mod-mail-1.26.3-6.0.1.el10_2.6.x86_64.rpm nginx-mod-stream-1.26.3-6.0.1.el10_2.6.x86_64.rpm

nginx-1.26.3-6.0.1.el10_2.6.aarch64.rpm nginx-all-modules-1.26.3-6.0.1.el10_2.6.noarch.rpm nginx-core-1.26.3-6.0.1.el10_2.6.aarch64.rpm nginx-filesystem-1.26.3-6.0.1.el10_2.6.noarch.rpm nginx-mod-devel-1.26.3-6.0.1.el10_2.6.aarch64.rpm nginx-mod-http-image-filter-1.26.3-6.0.1.el10_2.6.aarch64.rpm nginx-mod-http-perl-1.26.3-6.0.1.el10_2.6.aarch64.rpm nginx-mod-http-xslt-filter-1.26.3-6.0.1.el10_2.6.aarch64.rpm nginx-mod-mail-1.26.3-6.0.1.el10_2.6.aarch64.rpm nginx-mod-stream-1.26.3-6.0.1.el10_2.6.aarch64.rpm

Related CVEs: CVE-2026-56434 CVE-2026-60005

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Nginx Vulnerabilities Affect Oracle Linux Versions Recent advisories detail multiple vulnerabilities in Nginx across Oracle Linux versions 8, 9, and 10, including CVE-2026-60005 and CVE-2026-56434, which could lead to memory disclosure and denial of service. These vulnerabilities are particularly concerning as they allow for remote denial of service attacks via crafted HTTP/2 headers and memory corruption. Oracle Linux 8 and 9 users are advised to update to patched versions to mitigate risks associated with these vulnerabilities. The vulnerabilities were disclosed between March and July 2026, with some having proof-of-concept (PoC) code available. The advisories emphasize the urgency of applying patches due to the potential for exploitation. The affected Nginx versions include 1.24 and 1.26, with specific CVEs linked to each version. Current status indicates that patches are available, but the risk remains high until all users apply these updates. 4 sources 69

Extracted Entities

Oracle Linux 10 ELSA-2026

The full story

Extracted Entities

CVEs (5)

CWE Weaknesses (5)

Platforms (1)

Tools (1)