Skip to content
Oracle Linux 8 Nginx Vulnerability Could Lead to Memory Disclosure Risk

Oracle Linux 8 Nginx Vulnerability Could Lead to Memory Disclosure Risk

Linuxsecurity •LinuxSecurity Advisories • August 27, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

[1.24.0-3.4.0.1] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-3.4] - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-219309 - nginx:1.24/nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) [1:1.24.0-3.3] - Resolves: RHEL-191779 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188406 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) [1:1.24.0-3.2] - Resolves: RHEL-178676 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182543 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack [1:1.24.0-3.1] - Resolves: RHEL-176224 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) [1:1.24....

[1.24.0-3.4.0.1] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-3.4] - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-219309 - nginx:1.24/nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) [1:1.24.0-3.3] - Resolves: RHEL-191779 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188406 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) [1:1.24.0-3.2] - Resolves: RHEL-178676 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182543 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack [1:1.24.0-3.1] - Resolves: RHEL-176224 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) [1:1.24....

nginx-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-all-modules-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-filesystem-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-mod-devel-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-http-image-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-http-perl-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-http-xslt-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-mail-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-stream-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm

nginx-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-all-modules-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-filesystem-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-mod-devel-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-http-image-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-http-perl-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-http-xslt-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-mail-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm nginx-mod-stream-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.x86_64.rpm

nginx-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-all-modules-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-filesystem-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-mod-devel-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-http-image-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-http-perl-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-http-xslt-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-mail-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-stream-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm

nginx-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-all-modules-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-filesystem-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.noarch.rpm nginx-mod-devel-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-http-image-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-http-perl-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-http-xslt-filter-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-mail-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm nginx-mod-stream-1.24.0-3.0.1.module+el8.10.0+91001+0c279a1d.4.aarch64.rpm

Related CVEs: CVE-2026-56434 CVE-2026-60005

Get the latest Linux and open source security news straight to your inbox.