elsa-2026-3638

oracle_linux
Description

[1.24.0-5.1.0.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-5.1] - Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) [1:1.24.0-5] - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) [1:1.24.0-4] - Resolves: RHEL-49350 - nginx worker processes memory leak [1:1.24.0-3] - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx [1:1.24.0-2] - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-1642"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[1.24.0-5.1.0.1]\n- Reference oracle-indexhtml within Requires [Orabug: 33802044]\n- Remove Red Hat references [Orabug: 29498217]\n\n[1:1.24.0-5.1]\n- Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via\n  man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)\n\n[1:1.24.0-5]\n- Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause\n  denial of service (CVE-2024-7347)\n\n[1:1.24.0-4]\n- Resolves: RHEL-49350 - nginx worker processes memory leak\n\n[1:1.24.0-3]\n- Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx\n\n[1:1.24.0-2]\n- Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set",
  "id": "ELSA-2026-3638",
  "ovalId": "oval:com.oracle.elsa:def:20263638",
  "source": "oracle_linux",
  "title": "ELSA-2026-3638:  nginx:1.24 security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-3638.html"
}
View JSON API Download JSON