critique
CVE-2026-42945
nginx: NGINX: Arbitrary Code Execution Vulnerability
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Red Hat8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Le label propre à Trivy est CRITICAL. Critique selon Red Hat, AlmaLinux, Azure Linux, Bitnami, Oracle, Rocky Linux. Plus basse selon Amazon (élevée), Photon OS (élevée), Ubuntu (élevée).
Description
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 10 | nginx, nginx-all-modules, nginx-core et 7 autres | 2:1.26.3-6.el10_2.3 |
| alma 8 | nginx:1.24::nginx, nginx:1.24::nginx-all-modules, nginx:1.24::nginx-filesystem et 6 autres | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 9 | nginx, nginx-all-modules, nginx-core et 11 autres | 2:1.20.1-28.el9_8.2.alma.1 et 2 autres |
| Azure Linux 3.0 | nginx | 0:1.28.3-2.azl3 |
| bitnami::Bitnami Vulnerability Database | nginx, nginx-gateway | 1.30.1 |
| Oracle Linux 8 | nginx, nginx-all-modules, nginx-filesystem et 6 autres | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 9 | nginx, nginx-all-modules, nginx-core et 7 autres | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| rocky 10 | nginx, nginx-all-modules, nginx-core et 6 autres | 2:1.26.3-6.el10_2.3 |
| rocky 8 | nginx:1.24::nginx, nginx:1.24::nginx-all-modules, nginx:1.24::nginx-filesystem et 6 autres | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 9 | nginx, nginx-all-modules, nginx-core et 26 autres | 2:1.20.1-28.el9_8.2.rocky.0.1 et 2 autres |
| alpine 3.21 | nginx | 1.26.3-r1 |
| alpine 3.22 | nginx | 1.28.3-r1 |
Afficher les 196 entrées de 43 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 10 | nginx | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-all-modules | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-core | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-filesystem | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-devel | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-mail | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-stream | 2:1.26.3-6.el10_2.3 |
| alma 8 | nginx:1.24::nginx | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-all-modules | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-filesystem | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-devel | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-mail | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-stream | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 9 | nginx | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-all-modules | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-core | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-filesystem | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-devel | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx:1.24::nginx-all-modules | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| alma 9 | nginx:1.24::nginx-filesystem | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| alma 9 | nginx:1.26::nginx-all-modules | 2:1.26.3-9.module_el9.8.0+247+aa936373 |
| alma 9 | nginx:1.26::nginx-filesystem | 2:1.26.3-9.module_el9.8.0+247+aa936373 |
| Azure Linux 3.0 | nginx | 0:1.28.3-2.azl3 |
| bitnami::Bitnami Vulnerability Database | nginx | 1.30.1 |
| bitnami::Bitnami Vulnerability Database | nginx-gateway | 1.30.1 |
| Oracle Linux 8 | nginx | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-all-modules | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-filesystem | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-devel | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-image-filter | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-perl | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-xslt-filter | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-mail | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-stream | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 9 | nginx | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-all-modules | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-core | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-filesystem | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-devel | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-image-filter | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-perl | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-xslt-filter | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-mail | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-stream | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| rocky 10 | nginx | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-all-modules | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-core | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-filesystem | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-mail | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-stream | 2:1.26.3-6.el10_2.3 |
| rocky 8 | nginx:1.24::nginx | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-all-modules | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-filesystem | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-devel | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-mail | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-stream | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 9 | nginx | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-all-modules | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-core | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-filesystem | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-all-modules | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-core | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-filesystem | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-devel | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-mail | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-stream | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.26::nginx | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-all-modules | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-core | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-filesystem | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-devel | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-image-filter | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-perl | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-xslt-filter | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-mail | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-stream | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| alpine 3.21 | nginx | 1.26.3-r1 |
| alpine 3.22 | nginx | 1.28.3-r1 |
| alpine 3.23 | nginx | 1.28.3-r1 |
| alpine 3.24 | nginx | 1.30.1-r0 |
| alpine edge | nginx | 1.30.1-r0 |
| amazon linux 2023 | nginx | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-all-modules | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-core | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-core-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-debugsource | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-filesystem | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-devel | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-image-filter | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-image-filter-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-perl | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-perl-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-xslt-filter | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-xslt-filter-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-mail | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-mail-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-stream | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-stream-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| chainguard | ingress-nginx-controller-1.13 | 1.13.9-r9 |
| chainguard | ingress-nginx-controller-1.14 | 1.14.5-r12 |
| chainguard | ingress-nginx-controller-1.15 | 1.15.5-r1 |
| chainguard | ingress-nginx-controller-fips-1.13 | 1.13.9-r9 |
| chainguard | ingress-nginx-controller-fips-1.14 | 1.14.5-r9 |
| chainguard | ingress-nginx-controller-fips-1.15 | 1.15.5-r1 |
| chainguard | nginx-mainline | 1.31.0-r0 |
| chainguard | nginx-stable | 1.30.1-r0 |
| debian 11 | nginx | 1.18.0-6.1+deb11u6 |
| debian 12 | nginx | 1.22.1-9+deb12u7 |
| debian 13 | nginx | 1.26.3-3+deb13u5 |
| debian 14 | nginx | 1.30.0-3 |
| echo | nginx | 1.22.1-9+deb12u7 |
| echo | nginx-1.30 | 1.30.1 |
| echo | nginx-1.31 | 1.31.0 |
| minimos | nginx-1.30 | 1.30.1-r0 |
| Photon OS 4.0 | nginx | 1.26.3-3.ph4 |
| rapidfort alma 9 | nginx-all-modules | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| rapidfort alma 9 | nginx-filesystem | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| rapidfort alpine 3.20 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.21 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.22 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.23 | nginx | 1.28.3-r1 |
| rapidfort alpine 3.24 | nginx | 1.28.3-r1, 1.30.1-r0 |
| rapidfort debian 12 | nginx | 0:1.26.3-3+deb13u5, 0:1.30.0-3 |
| rapidfort debian 12 | rf-nginx | 0:1.29.4-1~noble |
| rapidfort debian 13 | nginx | 0:1.26.3-3+deb13u5, 0:1.30.0-3 |
| rapidfort debian 13 | rf-nginx | 0:1.29.4-1~noble |
| rapidfort fedora 41 | nginx | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | nginx-core | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | nginx-filesystem | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx-core | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx-filesystem | 2:1.28.0-3.fc41 |
| rapidfort fedora 43 | nginx | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-all-modules | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-core | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-filesystem | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-brotli | 1.0.0~rc-9.fc43 |
| rapidfort fedora 43 | nginx-mod-devel | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-fancyindex | 0.6.0-4.fc43 |
| rapidfort fedora 43 | nginx-mod-headers-more | 0.39-9.fc43 |
| rapidfort fedora 43 | nginx-mod-http-image-filter | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-http-perl | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-http-xslt-filter | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-mail | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-modsecurity | 1.0.4-10.fc43 |
| rapidfort fedora 43 | nginx-mod-naxsi | 1.6-17.fc43 |
| rapidfort fedora 43 | nginx-mod-stream | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-vts | 0.2.4-9.fc43 |
| rapidfort fedora 43 | rf-nginx | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | rf-nginx-core | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | rf-nginx-filesystem | 2:1.30.1-1.fc43 |
| rapidfort rocky 9 | nginx | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-core | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| root.io debian 12 | rootio-nginx | 1.22.1-9+deb12u7 |
| ubuntu 18.04-ESM | nginx | 1.14.0-0ubuntu1.11+esm2 |
| ubuntu 20.04-ESM | nginx | 1.18.0-0ubuntu1.7+esm1 |
| ubuntu 22.04 | nginx | 1.18.0-6ubuntu14.11 |
| ubuntu 24.04 | nginx | 1.24.0-2ubuntu7.8 |
| ubuntu 25.10 | nginx | 1.28.0-6ubuntu1.3 |
| ubuntu 26.04 | nginx | 1.28.3-2ubuntu1.1 |
| wolfi | ingress-nginx-controller-1.14 | 1.14.5-r12 |
| wolfi | ingress-nginx-controller-1.15 | 1.15.5-r1 |
| wolfi | nginx-mainline | 1.31.0-r0 |
| wolfi | nginx-stable | 1.30.1-r0 |
Références
- https://access.redhat.com/errata/RHSA-2026:17417
- https://access.redhat.com/errata/RHSA-2026:17751
- https://access.redhat.com/errata/RHSA-2026:17752
- https://access.redhat.com/errata/RHSA-2026:17753
- https://access.redhat.com/errata/RHSA-2026:17790
- https://access.redhat.com/errata/RHSA-2026:17791
- https://access.redhat.com/errata/RHSA-2026:17792
- https://access.redhat.com/errata/RHSA-2026:17793
Les 48 références
- https://access.redhat.com/errata/RHSA-2026:17794
- https://access.redhat.com/errata/RHSA-2026:18029
- https://access.redhat.com/errata/RHSA-2026:18041
- https://access.redhat.com/errata/RHSA-2026:18063
- https://access.redhat.com/errata/RHSA-2026:19159
- https://access.redhat.com/errata/RHSA-2026:19371
- https://access.redhat.com/errata/RHSA-2026:19372
- https://access.redhat.com/errata/RHSA-2026:19374
- https://access.redhat.com/errata/RHSA-2026:20442
- https://access.redhat.com/errata/RHSA-2026:20444
- https://access.redhat.com/errata/RHSA-2026:21275
- https://access.redhat.com/errata/RHSA-2026:22382
- https://access.redhat.com/errata/RHSA-2026:22383
- https://access.redhat.com/errata/RHSA-2026:22388
- https://access.redhat.com/errata/RHSA-2026:22389
- https://access.redhat.com/errata/RHSA-2026:22390
- https://access.redhat.com/errata/RHSA-2026:22393
- https://access.redhat.com/errata/RHSA-2026:22394
- https://access.redhat.com/errata/RHSA-2026:22396
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/security/cve/CVE-2026-42945
- https://bugzilla.redhat.com/2477116
- https://bugzilla.redhat.com/show_bug.cgi?id=2477116
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42945
- https://depthfirst.com/nginx-rift
- https://depthfirst.com/research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability
- https://errata.almalinux.org/9/ALSA-2026-19374.html
- https://errata.rockylinux.org/RLSA-2026:19374
- https://github.com/DepthFirstDisclosures/Nginx-Rift
- https://linux.oracle.com/cve/CVE-2026-42945.html
- https://linux.oracle.com/errata/ELSA-2026-19374.html
- https://my.f5.com/manage/s/article/K000161019
- https://nginx.org/en/security_advisories.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-42945
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42945.json
- https://ubuntu.com/security/notices/USN-8271-1
- https://ubuntu.com/security/notices/USN-8375-1
- https://www.cve.org/CVERecord?id=CVE-2026-42945
- https://www.openwall.com/lists/oss-security/2026/05/13/7