Red Hat Product Errata RHSA-2026:28921 - Security Advisory Issued: 2026-06-24 Updated: 2026-06-24 RHSA-2026:28921 - Security Advisory Overview Updated Packages Synopsis Important: nginx:1.24 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2480746 - CVE-2026-9256 nginx: ngx_http_rewrite_module: code execution and denial of service CVEs CVE-2026-9256 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM nginx-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.src.rpm SHA-256: e3ccf96b1a7aee1ff128fe5ff90d0b7389420164932b28ed022150e9b9cddc71 x86_64 nginx-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 220fdb2712fbf09d79b4d6b909ac6bf19046fd574f6979aded94a0b8033bf5c8 nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: f8c5e637971e16ff0744ab8da947ff9210c04d2a4bceb1958559180b13adf897 nginx-debugsource-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 186c9104195e6ebf07bc8ab5192603c2eaa8a34bca6de49677cd548cf21e3a2b nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-mod-devel-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: d4c73a79f816097fb8bf4eb0f45ed7881c7eb5afca81507f2c857c38747277a5 nginx-mod-http-image-filter-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 62c52a6f63090e8781e4a76581a45594bf9a035282da7b68f70a257f881ad3f2 nginx-mod-http-image-filter-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 315fc6410640dac0c6a09aee2cbfe134c910c11dc8146b14051b8dd930244a7f nginx-mod-http-perl-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: b802b7ce4f69827086966e204f3409fbe3421eae01726ef80fcd820c07c7e19e nginx-mod-http-perl-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 3348a9eb9ed12ba21883958f7ab3f4e9b3c8b7dfd628326faf578b1b2b77dd0a nginx-mod-http-xslt-filter-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: db86122280413fa3f18cb6b28dd9c3bb7e59f9cbef3fc14d347c646fe47e6b76 nginx-mod-http-xslt-filter-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: e80d5c5b014830f1c7522e597ed04e260a3776e06d84b674ec3287f6053e8ff7 nginx-mod-mail-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 5b47ece9b88e9aeb7996542d8e0739a126d8ef8bc5615b178930d01eae9feea8 nginx-mod-mail-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 823d9e19b45846a0d4e4367b3a6140d1310da6a57f466e2ad3c8d0452d95a25e nginx-mod-stream-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: 64f0f54e535ab2dd59b92b60cf78a379060df6a79021a405564384bfb1f8b0a1 nginx-mod-stream-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.x86_64.rpm SHA-256: c7a8b534555850b889e369a33606f174f3f32d43e2e6d7fd2dfbbade227f0abd nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f Red Hat Enterprise Linux for IBM z Systems 8 SRPM nginx-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.src.rpm SHA-256: e3ccf96b1a7aee1ff128fe5ff90d0b7389420164932b28ed022150e9b9cddc71 s390x nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 207a2c5b320348525303e75668e20634dd06444f45e56da67dc5872b06fbfe75 nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: ecc6d0b0da2139bd21201858e9cf77088cfdc76d0450775597cf2c7fdbadff57 nginx-debugsource-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: a4eaf554bbef106c83e802bddedf44e6ff3ad33ea189524143531428b314a783 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-mod-devel-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: d183c4ad9fea3a9d1b18b48128396ff55d3606de1f2679888797b52f810d09c8 nginx-mod-http-image-filter-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 2bd72200e2693795ddd45bc4229fb11ad66d5d61921074fe46fdd84e9f96211b nginx-mod-http-image-filter-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: c5089686d064b93cce9a19bf12eee2a64bdc53084c32a1c263d0d763c1c1a1d2 nginx-mod-http-perl-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 2254c4669df16901bc58febcc1bd7202c1c4241c23deba367de7c36a7f234a1e nginx-mod-http-perl-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: c33eb12e9d781bdcc7c1b6e08d6efefbce9a3193caba895d97f5066361977af0 nginx-mod-http-xslt-filter-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 63d4806207bf2bcccf36a86be59fb2fde07a5af2b33f47ef9bb923740adab0d9 nginx-mod-http-xslt-filter-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: d437583112ea0899ba3cabeaed72462fb87c7b7c75f86e8ed37798216457b19a nginx-mod-mail-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 8edd252ea7305c8d35c9a73f178ee49777c69e500b5b69671c3d2ba0271bfaaa nginx-mod-mail-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 6c1ad3942ef6f6560a0c4da310a1bfa9d104940cdfa406368a0ee1fc12a8e666 nginx-mod-stream-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 6c3186b20f802e36ca5ad13261d193a00e0cd6caad075ad876fee71c892cf29a nginx-mod-stream-debuginfo-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.s390x.rpm SHA-256: 709e1bef0a47ee99f6bc9176f77c3255d0ebd4cd636c53b7e3abf1dd840ca6f9 nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f Red Hat Enterprise Linux for Power, little endian 8 SRPM nginx-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.src.rpm SHA-256: e3ccf96b1a7aee1ff128fe5ff90d0b7389420164932b28ed022150e9b9cddc71 ppc64le nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 2b82f297282bd15237f34aa2071347e9365d29bff907550c154a7619ac46553f nginx-all-modules-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SHA-256: 3a05edf3b574227afa1b9650be1d76a5658deabc251e833bc4e406808f577079 nginx-filesystem-1.24.0-3.module+el8.10.0+24380+8b0811ed.2.noarch.rpm SH