Skip to content
Oracle Linux 9 Nginx Key Denial of Service Vulnerability ELSA-2026

Oracle Linux 9 Nginx Key Denial of Service Vulnerability ELSA-2026

Linuxsecurity LinuxSecurity Advisories August 27, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

[1.26.3-9.0.1.3] - Require oracle-indexhtml [2:1.26.3-13] - Fixes CVE-2026-56434 and CVE-2026-60005 [2:1.26.3-12] - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [2:1.26.3-11] - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack [2:1.26.3-10] - nginx: code execution and denial of service (CVE-2026-9256) [2:1.26.3-9] - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) [2:1.26.3-8] - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files [2:1.26.3-7] - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled [2:1.26.3-6] - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file [2:1.26.3-5] - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or f...

[1.26.3-9.0.1.3] - Require oracle-indexhtml [2:1.26.3-13] - Fixes CVE-2026-56434 and CVE-2026-60005 [2:1.26.3-12] - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [2:1.26.3-11] - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack [2:1.26.3-10] - nginx: code execution and denial of service (CVE-2026-9256) [2:1.26.3-9] - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) [2:1.26.3-8] - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files [2:1.26.3-7] - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled [2:1.26.3-6] - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file [2:1.26.3-5] - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or f...

nginx-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-all-modules-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-core-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-filesystem-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-mod-devel-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-http-image-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-http-perl-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-http-xslt-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-mail-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-stream-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm

nginx-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-all-modules-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-core-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-filesystem-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-mod-devel-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-http-image-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-http-perl-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-http-xslt-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-mail-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm nginx-mod-stream-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.x86_64.rpm

nginx-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-all-modules-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-core-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-filesystem-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-mod-devel-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-http-image-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-http-perl-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-http-xslt-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-mail-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-stream-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm

nginx-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-all-modules-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-core-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-filesystem-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.noarch.rpm nginx-mod-devel-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-http-image-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-http-perl-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-http-xslt-filter-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-mail-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm nginx-mod-stream-1.26.3-9.0.1.module+el9.8.0+91002+d4b54b3d.3.aarch64.rpm

Related CVEs: CVE-2026-56434 CVE-2026-60005

Get the latest Linux and open source security news straight to your inbox.