红帽产品勘误 RHSA-2026:6923 - Security Advisory
发布：
2026-04-07
已更新：
2026-04-07

RHSA-2026:6923 - Security Advisory

概述

Important: nginx:1.24 security update

类型/严重性

Security Advisory: Important

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

  • nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
  • NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
  • NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
  • NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64

修复

  • BZ - 2449598 - CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files
  • BZ - 2450776 - CVE-2026-27654 NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module
  • BZ - 2450785 - CVE-2026-27784 NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file
  • BZ - 2450791 - CVE-2026-27651 NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled

Red Hat Enterprise Linux for x86_64 9

SRPM
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.src.rpm SHA-256: 5775eb434a14ccdd5c77090fdfa8422787f48ceed07ecfbb2ec7b7dfb5823bb5
x86_64
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 0ca0c0a7eacf125d3047dcef765dfe106ea88e0979bc028517563bb02127cb76
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-core-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: d5e52abe488335c4cf3f42a077f67b90c9a3fd2ebd0217a3326aefa53ed72bf3
nginx-core-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 329105cdd8de6af55e20fa5a2a9a8a52edad8241f8b2e4ea2e12cdf4faf20453
nginx-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 3149b2917e0249d875236bad7e733b64ea412dd80b3e6cc7b37b452dc87306ac
nginx-debugsource-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: ac7b9df760c5a2c05286c98eaf49e7c14606f238323ef1684f4eb0353c76e46e
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-mod-devel-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 124e8a312f2a5aef56075310a4996907cbbc0c5a21de10232f8ce67b4b956979
nginx-mod-http-image-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 27b9c036e24285fdb2d92344f1adc80230a71c2f8a2e17a99293b50b2e9fb33d
nginx-mod-http-image-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 74e33cab91673c03cc1827a1b53e15a4e947e83a06929d14f916ea7be07a4c3c
nginx-mod-http-perl-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: a0e7ea21ce9d9b8739d99466b04583979756438f053adc0619dc47c210c0172f
nginx-mod-http-perl-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 60dee9b7efe63143bac0c49d1adffd072da69513ec08dd8b3323f81ec72ac5b9
nginx-mod-http-xslt-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 8f3a3c8f5b6d6b3188d9caee011f69d2dfa06a26d713e9e5d0adfd6e423f547e
nginx-mod-http-xslt-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: bc5bf57d38692dc8aff178738f4d1962ad9149a40452522cba2e9e074de255ee
nginx-mod-mail-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 01ecb78c4b69da2afd82e6dd412ae66a1638662af3e3173dd144fb404db7d44c
nginx-mod-mail-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 6920cdfc80747e8b953756a43cc6c66f7775464b2eb2eb9c9cbbb8792c5f5dde
nginx-mod-stream-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 8fa3debc237190db5fd3af24c44342906ed632785958bfd08c4f3350e47eb60f
nginx-mod-stream-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.x86_64.rpm SHA-256: 5896b99601c168e26f4656fb6a5d388568a401b1e2fed514e2b2b3a9093bd634
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.src.rpm SHA-256: 5775eb434a14ccdd5c77090fdfa8422787f48ceed07ecfbb2ec7b7dfb5823bb5
s390x
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: a7ea073485ce2de32df8178dac08d7af391c44d56a8c9a80be74a5be2059bd67
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-core-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 18a267a688dbdcc44f3c5743131b7d51b5fd9a394fcb13ba5b496721e0fff69e
nginx-core-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 743957b1d009a15e3f1a90458351ea6e2a5afb750d6c8a1207360641e9c8e58e
nginx-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 303cc95672288200f9afd5e62a4ae103fdd6727aa0d1bda40e82c4be049bbc49
nginx-debugsource-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 1c39c4d2dafb3485a6fe9bb1484114fa183af3072b4e79cdec4f394462335a83
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-mod-devel-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: b5d79de46b3bbc2344848fcffc4fba7fcc8d489f005a8b74b40addaf2ef0958d
nginx-mod-http-image-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 4c0dbc6785bec2cb6682cbdd5d48c6761afad0f313ff5ac12b97703c9cdaf272
nginx-mod-http-image-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: bc543169460cbbfe0f604c763634b54699ec70b27fea1356d6bfb084a83196a6
nginx-mod-http-perl-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 01db79bec167cd73b551d45b7aca621ab447a26caff1cc7be4ae7cc51f26ffa4
nginx-mod-http-perl-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: dcd9d3443a7f15c6dad620ccabc9b47aaf0670f42e20ff922e356e8fb26bfed7
nginx-mod-http-xslt-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 59ccd1bfc146e0fa14eadfdd377ec8e483ae3dd14be6ac0f7e3ec3f293b1f109
nginx-mod-http-xslt-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: de1940c3a20e4853cbd3b72f44c5f9f55996c57a032a18895c204844a5191691
nginx-mod-mail-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 26978c0a961143a7005b19146c843c8f197b41271dbd2894107a0749e3fe1c4b
nginx-mod-mail-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: f3eb22b6f24a1e710e6aaeb8dfede425894c9bf73d143729c9eb98cd1d2e24ea
nginx-mod-stream-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 686de4db11dd456fbc0f48f20ea1830ee0cca5f16b8fad83c2fefe6effd81c87
nginx-mod-stream-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.s390x.rpm SHA-256: 2fea6e28a3c2c66cee3356cb101e4a9de9a876a8d52ef1da4405e08441d587b3

Red Hat Enterprise Linux for Power, little endian 9

SRPM
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.src.rpm SHA-256: 5775eb434a14ccdd5c77090fdfa8422787f48ceed07ecfbb2ec7b7dfb5823bb5
ppc64le
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: d7513399028b20611facc17d30d16e7cea1cf3a14d5aec6fe182f114b4747f47
nginx-core-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: fc36efefc1534d384aacfde466d0c11d99fbd96256237524e6c1409c61aa9c5f
nginx-core-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: e9bf0c9442fc0b81279b53bfce807a59b1dfaaf20ea2b160022a27602920ff05
nginx-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: b159d04b0beba38f4d7dfe42de79a448b1fcf83f1e178fa84a3fbb870c023e3b
nginx-debugsource-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: ce484bd977fa6611b1a8565acf142645daa47dcd24f34e530af9a0aadc8a2c03
nginx-mod-devel-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 64b6239bc5597864906179b54e5a9e0acaf6d61c157445c5a9d2af2d48890ac2
nginx-mod-http-image-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 9624e78af52d69a293977a8186f87076a0e1202f28ffb208fe071a5096f60c7b
nginx-mod-http-image-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 3a281e030cbd0b950a2062666e31062fc14a0f1c02a43dc97f601cf745ba606b
nginx-mod-http-perl-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 8dfde7117b092f01e5bca413c303087b0f7890dbcf9c8b21cf77ab701938928e
nginx-mod-http-perl-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 6e3e07bced16cf1411a1fc9370bafe3e73b2fc1613199fe6ad4f78c84ea3d6e5
nginx-mod-http-xslt-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 99301f1d72de45b736279cbe5e0d82700ca893f9d553f835c9b58b6f656923c7
nginx-mod-http-xslt-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 7762ba5000a653fe8808213c3c7f03783ba9e94fe5fc4f9572312192b8b90c18
nginx-mod-mail-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 6e83f95394121f88b11086544c730cbaf5afcb09959fa18fa8c362b419be8cb9
nginx-mod-mail-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 2a7dfa306095c7bd5b00163bedbc9673c1307a25625080cefc9af118dd7d6c1b
nginx-mod-stream-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: be735a6079984d69db8fc8c09029013a51eb943cd3fd53b88c42d6d190c2a0f6
nginx-mod-stream-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.ppc64le.rpm SHA-256: 9d9567a886dee33d45b444350494f6e79717693be896f3f84f846dc6599808e2
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5

Red Hat Enterprise Linux for ARM 64 9

SRPM
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.src.rpm SHA-256: 5775eb434a14ccdd5c77090fdfa8422787f48ceed07ecfbb2ec7b7dfb5823bb5
aarch64
nginx-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 0870eac636f09e19b3bb9e558c2f183a4193a400590cbd856e05a6279347b8b7
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-core-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 46344007e6889f323c478d7b8e437dc3411e6a013b5cab6c2bea0078bd413c0a
nginx-core-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 9706f1f73d262bf8b7c40f9fd295ccafb2acbbb41b80171890c758818b63fe56
nginx-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 03c7154e26d5ab29402f8cd5c3b7989c91a55531a398b56bffdd28f1cc037c6f
nginx-debugsource-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: d90852be116f0c6bc1244f60ae27ad17fb1ad89f47c9e64976f795cdbe39a5fb
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-mod-devel-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 443118cc93d3879254c1bdfe765aafbb72bd3d31066103170c3db988dd14e80d
nginx-mod-http-image-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 99ba91bb35b624df68641f9a90971801a9ce225a0c9c0f278f642765caca1766
nginx-mod-http-image-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: aa8d1cbd55caa5b688352410ace1ad6ab5502eba3823f945faa8694ffe409f1b
nginx-mod-http-perl-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 4ef12c0e9a46f5be43e2a9ab88dc59b9f47a51ff7d84241c365e7c6aba1aabe5
nginx-mod-http-perl-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 7fb2cf9c9165decdec4866b4b707c6ace3d644acdd679852c9a57cbeb6fc4837
nginx-mod-http-xslt-filter-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 50e4dedd390c3bd06233b44976392971b661174ab60382895cb1fb4b7aac5adb
nginx-mod-http-xslt-filter-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: df0014e3e5d9eebb42f1c16eab5a8ae20bbfd3202f4d1c1e837c586e14c54deb
nginx-mod-mail-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 176def2cb8665f3cd2f38eb296441a854283fbcb078ef8c25975133d3a908759
nginx-mod-mail-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: ae88bab0c9f0f7e05cebc7189393a1fb15302246a596173d91e245e9f3616e1e
nginx-mod-stream-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 062f5c4976ac458a3d046488fffb50016ae75c595afdb17e0639ec43b9eb01ee
nginx-mod-stream-debuginfo-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.aarch64.rpm SHA-256: 8c3eebd868a4b24975ab55fa7894c99ef76e0e23321a7230475e953a8fa2e00e
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5
nginx-all-modules-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 2c0483c9f5d7c13f1d230bb6cc949136a88f3011c46a379295ff5429cab16164
nginx-filesystem-1.24.0-5.module+el9.7.0+24151+c43a3acf.2.noarch.rpm SHA-256: 5a7491f60d0fbf8ffb53b853649c226bc85e206d8921488119c7982da9167dc5

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。