Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 43 nginx Critical Data Injection Threat CVE-2026-1642 Advisory

fedora
Calendar Grey February 15, 2026
Dist Fedora Esm H88
Urgent nginx update for Fedora 43 addresses critical data injection threat due to CVE-2026-1642. Get patch details now!
nginx-mod-naxsi: Rebuild for 1.28.2 nginx-mod-brotli: Rebuild for 1.28.2 nginx-mod-fancyindex:

Summary

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and

IMAP protocols, with a strong focus on high concurrency, performance and low

memory usage.

Update Information:

nginx-mod-naxsi: Rebuild for 1.28.2 nginx-mod-brotli: Rebuild for 1.28.2 nginx-mod-fancyindex: Rebuild for 1.28.2 nginx-mod-modsecurity: Rebuild for 1.28.2 nginx-mod-headers-more: Rebuild for 1.28.2 nginx-mod-vts: Rebuild for 1.28.2 nginx: Update to 1.28.2 fixes CVE-2026-1642 move log directory to nginx-filesystem subpackage (PR#20) delete Maxim Dounin's key, it's no longer listed on the nginx website

Topics%20covered

Topics Covered

security advisory fedora nginx TLS CVE data injection

Change Log

* Wed Feb 4 2026 Felix Kaechele - 2:1.28.2-1 - Update to 1.28.2 - fixes CVE-2026-1642 - move log directory to nginx-filesystem subpackage (PR#20) - delete Maxim Dounin's key, it's no longer listed on the nginx website * Wed Feb 4 2026 Nicolas Chauvet - 2:1.28.1-6 - Move log/nginx in filesystem sub-package * Tue Jan 27 2026 Lubo\u0161 Uhliarik - 2:1.28.1-5 - Clarify binding behavior of -t option. * Fri Jan 16 2026 Fedora Release Engineering - 2:1.28.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2436871 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2436871

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-cd0705c6a7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: nginx
Product: Fedora 43
Version: 1.28.2
Release: 1.fc43
URL: https://nginx.org
Summary: A high performance web server and reverse proxy server

Topics%20covered

Topics Covered

security advisory fedora nginx TLS CVE data injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here