Red Hat Product Errata RHSA-2026:29874 - Security Advisory Issued: 2026-06-25 Updated: 2026-06-25 RHSA-2026:29874 - Security Advisory Overview Updated Packages Synopsis Important: nginx security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for nginx is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2480746 - CVE-2026-9256 nginx: ngx_http_rewrite_module: code execution and denial of service CVEs CVE-2026-9256 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM nginx-1.26.3-6.el10_2.4.src.rpm SHA-256: df8029bccea8f3654d4ab3ad610a127974c5e44862e8b67c9296e44684a7df93 x86_64 nginx-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 83786dc1c23cccc26f047a7445831f64c6f10bb99279d77842b62eeef47bfb8f nginx-all-modules-1.26.3-6.el10_2.4.noarch.rpm SHA-256: 6f92956371bc3686b87d5bc6af8ab9e5750850519c707a41537fbb12e24a74d8 nginx-core-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 318e2e35bce407eeb8eb58512b0cd1d56904a61890b0461c0e3ed93f474dd6ae nginx-core-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 7b748ef0edd01d72919ebe002a637daa79a22f36e383820116bb47d6050cbbd8 nginx-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 649d2f5ce722d2bafd640f8d537b021e001000486fb24761b3cc40d3f7912837 nginx-debugsource-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 8bac38c8e81916352b424dd63bc8678ffb2b2d0e5977d5924a6a35df7b304d20 nginx-filesystem-1.26.3-6.el10_2.4.noarch.rpm SHA-256: 4be698fecc7b6226dc1893fed078b3daddb9ebc9c47eb19b46e22f394658bd86 nginx-mod-http-image-filter-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 732050b05887cd3e29683e8e8acb5f0441a5ffd6dfe63bc236268be189f55f99 nginx-mod-http-image-filter-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 97c32180511e3f564bb43b994f0580b8c3f8dbb369f2289dfd6c0a049f43cf01 nginx-mod-http-perl-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: cb3fd9aaadd03dbaa00689b422604adfb4fa094335d216efa3cfc73236ab740a nginx-mod-http-perl-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: b5d6d80c7aab4f5b904a05ad05d3a0d72a4006610fcef125095d760aa04e73f7 nginx-mod-http-xslt-filter-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: b6b5cd0b7c28dff88d78112cfaeb02c8fdc4f2a9b55ac50bbee4b3c0635d272b nginx-mod-http-xslt-filter-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 4ef886d156abf800115c570ebb7b9c9839ab163c6327947a956e962ef44f2f65 nginx-mod-mail-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: eb7d3146f4011293db3c226df71ac64ac62fd30aaff00728d13b641c12104830 nginx-mod-mail-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: f1ff82b51d26b4f2bb65fff049e776c3fc48fdcb1ddc5e2c546d9f77c6f8ff58 nginx-mod-stream-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: f5c009e1fe77cb3146b159e7759e9d1f0da2ddb8eb9d2a1f529ee38e2cd4de2a nginx-mod-stream-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 40481fa6fe17080c691ab3e5eee704e06d79889d3c6fbd950aab367d15b35c63 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM nginx-1.26.3-6.el10_2.4.src.rpm SHA-256: df8029bccea8f3654d4ab3ad610a127974c5e44862e8b67c9296e44684a7df93 x86_64 nginx-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 83786dc1c23cccc26f047a7445831f64c6f10bb99279d77842b62eeef47bfb8f nginx-all-modules-1.26.3-6.el10_2.4.noarch.rpm SHA-256: 6f92956371bc3686b87d5bc6af8ab9e5750850519c707a41537fbb12e24a74d8 nginx-core-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 318e2e35bce407eeb8eb58512b0cd1d56904a61890b0461c0e3ed93f474dd6ae nginx-core-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 7b748ef0edd01d72919ebe002a637daa79a22f36e383820116bb47d6050cbbd8 nginx-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 649d2f5ce722d2bafd640f8d537b021e001000486fb24761b3cc40d3f7912837 nginx-debugsource-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 8bac38c8e81916352b424dd63bc8678ffb2b2d0e5977d5924a6a35df7b304d20 nginx-filesystem-1.26.3-6.el10_2.4.noarch.rpm SHA-256: 4be698fecc7b6226dc1893fed078b3daddb9ebc9c47eb19b46e22f394658bd86 nginx-mod-http-image-filter-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 732050b05887cd3e29683e8e8acb5f0441a5ffd6dfe63bc236268be189f55f99 nginx-mod-http-image-filter-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 97c32180511e3f564bb43b994f0580b8c3f8dbb369f2289dfd6c0a049f43cf01 nginx-mod-http-perl-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: cb3fd9aaadd03dbaa00689b422604adfb4fa094335d216efa3cfc73236ab740a nginx-mod-http-perl-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: b5d6d80c7aab4f5b904a05ad05d3a0d72a4006610fcef125095d760aa04e73f7 nginx-mod-http-xslt-filter-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: b6b5cd0b7c28dff88d78112cfaeb02c8fdc4f2a9b55ac50bbee4b3c0635d272b nginx-mod-http-xslt-filter-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 4ef886d156abf800115c570ebb7b9c9839ab163c6327947a956e962ef44f2f65 nginx-mod-mail-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: eb7d3146f4011293db3c226df71ac64ac62fd30aaff00728d13b641c12104830 nginx-mod-mail-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: f1ff82b51d26b4f2bb65fff049e776c3fc48fdcb1ddc5e2c546d9f77c6f8ff58 nginx-mod-stream-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: f5c009e1fe77cb3146b159e7759e9d1f0da2ddb8eb9d2a1f529ee38e2cd4de2a nginx-mod-stream-debuginfo-1.26.3-6.el10_2.4.x86_64.rpm SHA-256: 40481fa6fe17080c691ab3e5eee704e06d79889d3c6fbd950aab367d15b35c63 Red Hat Enterprise Linux for IBM z Systems 10 SRPM nginx-1.26.3-6.el10_2.4.src.rpm SHA-256: df8029bccea8f3654d4ab3ad610a127974c5e44862e8b67c9296e44684a7df93 s390x nginx-1.26.3-6.el10_2.4.s390x.rpm SHA-256: d2aba5b7a1129a56b20cd52fcccf6594a8affa7dec4c4d7ae2116c6ecba1fd8a nginx-all-modules-1.26.3-6.el10_2.4.noarch.rpm SHA-256: 6f92956371bc3686b87d5bc6af8ab9e5750850519c707a41537fbb12e24a74d8 nginx-core-1.26.3-6.el10_2.4.s390x.rpm SHA-256: 113191a686ba5ccbe867a2a1d2046c73f14676a610643703c54640991f2e8496 nginx-core-debuginfo-1.26.3-6.el10_2.4.s390x.rpm SHA-256: 2639630d56b826010e019a125df2b6673b1a27b992d7cdb24a4782b858927407 nginx-debuginfo-1.26.3-6.el10_2.4.s390x.rpm SHA-256: 92ed33dceca6ddcefcdf3fd53fa80d806e34f481ce4e06f0eb0571ac2fb7884a nginx-debugsource-1.26.3-6.el10_2.4.s390x.rpm SHA-256: b1b5210503666f1777d8fe490bf8d79f612c2e99e64bfac46fb567222a5c3892 nginx-filesystem-1.26.3-6.el10_2.4.noarch.rpm SHA-256: 4be698fecc7b6226dc1893fed078b3daddb9ebc9c47eb19b46e22f394658bd86 nginx-mod-http-image-filter-1.26.3-6.el10_2.4.s390x.rpm SHA-256: c27490f91b108358cb0245240c180258bc7cda24bc7d5f2a8bc147bb91695793 nginx-mod-http-image-filter-debuginfo-1.26.3-6.el10_2.4.s390x.rpm SHA-256: a861e058470cf1d4ad5965a44379ddfcd203f11b018e86f3ab7ef99a928e54cc nginx-mod-http-perl-1.26.3-6.el10_2.4.s390x.rpm SHA-256: d776bf306a544f323c72b591982da4f1b2df18bfc8b24e42aa98dec1710fdd3c nginx-mod-http-perl-debuginfo-1.26.3-6.el10_2.4.s390x.rpm SHA-256: 1163f3a694bd8aa6d83fc68d7a9199c668907d6399b7b019e74884852a7ad18a nginx-mod-http-xslt-filter-1.26.3-6.el10_2.4.s390x.rpm SHA-256: d92e864f2905d6a1667081842b6b629e5f8ac2f281feb0cee83342c1a8d2100c nginx-mod-http-xslt-filter-debuginfo-1.26.3-6.el10_2.4.s390x.rpm SHA-256: c8cebfa7a2ef9c49f40657b75b88939bb2e6b6783ce6d9f3d9fa58992f52c951 nginx-mod-mail-1.26.3-6.el10_2.4.s390x.rpm SHA-256: 98a50199a6df55c6d855e07d97bc3ea9c488dd8e544718341b372a0d410df3cb nginx-mod-mail-debuginfo-1.26.3-6.el10_2.4.s390x.rpm SHA-256: 8b56db60a93bf21e18d1c5e0e864cec21c51560964454051d5ce1cf1d6256857 nginx-mod-stream-1.26.3-6.el10_2.4.s390x.rpm SHA-256: 2e5a7c17