Advisories » MGASA-2026-0590

Updated nginx package fixes security vulnerabilities

Publication date: 12 Nov 2026
Modification date: 12 Nov 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-15176 , CVE-2026-93479 , CVE-2026-95101 , CVE-2026-97205 , CVE-2026-97629

Description

NGINX ngx_http_core_module vulnerability. (CVE-2026-15176)
NGINX map directive and regex matching vulnerability. (CVE-2026-93479)
NGINX ngx_http_v3_module vulnerability. (CVE-2026-95101)
NGINX ngx_http_core_module vulnerability. (CVE-2026-97205)
NGINX ngx_http_ssl_module vulnerability. (CVE-2026-97629)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36565
• https://lists.debian.org/debian-security-announce/2026/msg00490.html
• https://nginx.org/en/CHANGES-1.30
• https://www.openwall.com/lists/oss-security/2026/10/23/26
• https://my.f5.com/manage/s/article/K000163408
• https://my.f5.com/manage/s/article/K000162608
• https://my.f5.com/manage/s/article/K000162606
• https://my.f5.com/manage/s/article/K000162613
• https://my.f5.com/manage/s/article/K000162607
• https://my.f5.com/manage/s/article/K000162416
• https://ubuntu.com/security/notices/USN-8955-1
• https://www.cve.org/CVERecord?id=CVE-2026-15176
• https://www.cve.org/CVERecord?id=CVE-2026-93479
• https://www.cve.org/CVERecord?id=CVE-2026-95101
• https://www.cve.org/CVERecord?id=CVE-2026-97205
• https://www.cve.org/CVERecord?id=CVE-2026-97629

SRPMS

10/core

• nginx-1.30.6-1.mga10