Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Fedora 43 nginx-mod-modsecurity High DoS Vulnerability CVE-2026-9256

fedora
Calendar Grey June 1, 2026
Dist Fedora Esm H88
Update for Fedora 43 enhances nginx-mod-modsecurity for security against denial of service and code execution risk.
nginx-mod-brotli: Rebuild for 1.30.2 nginx-mod-fancyindex: Rebuild for 1.30.2 nginx-mod-naxsi:

Summary

The ModSecurity-nginx connector is the connection point between nginx and

libmodsecurity (ModSecurity v3). Said another way, this project provides a

communication channel between nginx and libmodsecurity. This connector is

required to use LibModSecurity with nginx.

The ModSecurity-nginx connector takes the form of an nginx module. The module

simply serves as a layer of communication between nginx and ModSecurity

Update Information:

nginx-mod-brotli: Rebuild for 1.30.2 nginx-mod-fancyindex: Rebuild for 1.30.2 nginx-mod-naxsi: Rebuild for 1.30.2 nginx-mod-headers-more: Rebuild for 1.30.2 nginx-mod-vts: Rebuild for 1.30.2 nginx-mod-modsecurity: Rebuild for 1.30.2 nginx: update to 1.30.2 fixes CVE-2026-9256

Topics%20covered

Topics Covered

security advisory denial of service fedora update nginx ModSecurity

Change Log

* Sat May 23 2026 Felix Kaechele - 1.0.4-11 - Rebuild for 1.30.2

References


[ 1 ] Bug #2481243 - CVE-2026-9256 nginx: code execution and denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2481243

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dd9cd16b18' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: nginx-mod-modsecurity
Product: Fedora 43
Version: 1.0.4
Release: 11.fc43
URL: https://github.com/SpiderLabs/ModSecurity-nginx
Summary: ModSecurity v3 nginx connector

Topics%20covered

Topics Covered

security advisory denial of service fedora update nginx ModSecurity

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here