{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/vex/2026/cve-2026-42945-els_os-oraclelinux7els.json" } ], "tracking": { "current_release_date": "2026-09-18T16:52:18Z", "generator": { "date": "2026-09-18T16:52:18Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-42945-ELS_OS-ORACLELINUX7ELS", "initial_release_date": "2026-05-13T16:16:00Z", "revision_history": [ { "date": "2026-05-13T16:16:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-09-18T16:52:18Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2026-42945" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 7", "product": { "name": "Oracle Linux 7", "product_id": "Oracle-Linux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch", "product": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch", "product_id": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-all-modules@1.20.1-10.el7.tuxcare.els7?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch", "product": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch", "product_id": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-all-modules@1.20.1-10.el7.tuxcare.els8?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch", "product": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch", "product_id": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-all-modules@1.20.1-10.el7.tuxcare.els6?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch", "product": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch", "product_id": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-all-modules@1.20.1-10.el7.tuxcare.els3?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch", "product": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch", "product_id": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-all-modules@1.20.1-10.el7.tuxcare.els5?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch", "product": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch", "product_id": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-filesystem@1.20.1-10.el7.tuxcare.els8?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch", "product": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch", "product_id": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-filesystem@1.20.1-10.el7.tuxcare.els5?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch", "product": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch", "product_id": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-filesystem@1.20.1-10.el7.tuxcare.els3?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch", "product": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch", "product_id": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-filesystem@1.20.1-10.el7.tuxcare.els7?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch", "product": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch", "product_id": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-filesystem@1.20.1-10.el7.tuxcare.els6?arch=noarch&epoch=1" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_id": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-stream@1.20.1-10.el7.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_id": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-stream@1.20.1-10.el7.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_id": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-stream@1.20.1-10.el7.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_id": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-stream@1.20.1-10.el7.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_id": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-stream@1.20.1-10.el7.tuxcare.els5?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_id": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-image-filter@1.20.1-10.el7.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_id": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-image-filter@1.20.1-10.el7.tuxcare.els5?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_id": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-image-filter@1.20.1-10.el7.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_id": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-image-filter@1.20.1-10.el7.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_id": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-image-filter@1.20.1-10.el7.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_id": "nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx@1.20.1-10.el7.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_id": "nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx@1.20.1-10.el7.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_id": "nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx@1.20.1-10.el7.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_id": "nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx@1.20.1-10.el7.tuxcare.els5?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_id": "nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx@1.20.1-10.el7.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_id": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-perl@1.20.1-10.el7.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_id": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-perl@1.20.1-10.el7.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_id": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-perl@1.20.1-10.el7.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_id": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-perl@1.20.1-10.el7.tuxcare.els5?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_id": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-perl@1.20.1-10.el7.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_id": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-devel@1.20.1-10.el7.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_id": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-devel@1.20.1-10.el7.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_id": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-devel@1.20.1-10.el7.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_id": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-devel@1.20.1-10.el7.tuxcare.els5?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_id": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-devel@1.20.1-10.el7.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_id": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-mail@1.20.1-10.el7.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_id": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-mail@1.20.1-10.el7.tuxcare.els5?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_id": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-mail@1.20.1-10.el7.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_id": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-mail@1.20.1-10.el7.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_id": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-mail@1.20.1-10.el7.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_id": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-xslt-filter@1.20.1-10.el7.tuxcare.els5?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_id": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-xslt-filter@1.20.1-10.el7.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_id": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-xslt-filter@1.20.1-10.el7.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_id": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-xslt-filter@1.20.1-10.el7.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_id": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/nginx-mod-http-xslt-filter@1.20.1-10.el7.tuxcare.els7?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch" }, "product_reference": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch" }, "product_reference": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch" }, "product_reference": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch" }, "product_reference": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch" }, "product_reference": "nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64" }, "product_reference": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64" }, "product_reference": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64" }, "product_reference": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64" }, "product_reference": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64" }, "product_reference": "nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64" }, "product_reference": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64" }, "product_reference": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64" }, "product_reference": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64" }, "product_reference": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64" }, "product_reference": "nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64" }, "product_reference": "nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64" }, "product_reference": "nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64" }, "product_reference": "nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64" }, "product_reference": "nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64" }, "product_reference": "nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64" }, "product_reference": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64" }, "product_reference": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64" }, "product_reference": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64" }, "product_reference": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64" }, "product_reference": "nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch" }, "product_reference": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch" }, "product_reference": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch" }, "product_reference": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch" }, "product_reference": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch" }, "product_reference": "nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64" }, "product_reference": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64" }, "product_reference": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64" }, "product_reference": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64" }, "product_reference": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64" }, "product_reference": "nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64" }, "product_reference": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64" }, "product_reference": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64" }, "product_reference": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64" }, "product_reference": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64" }, "product_reference": "nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-42945", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "title": "Vulnerability description" } ], "product_status": { "under_investigation": [ "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42945" }, { "category": "external", "summary": "https://my.f5.com/manage/s/article/K000161019", "url": "https://my.f5.com/manage/s/article/K000161019" }, { "category": "external", "summary": "https://depthfirst.com/nginx-rift", "url": "https://depthfirst.com/nginx-rift" }, { "category": "external", "summary": "https://github.com/DepthFirstDisclosures/Nginx-Rift", "url": "https://github.com/DepthFirstDisclosures/Nginx-Rift" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17417", "url": "https://access.redhat.com/errata/RHSA-2026:17417" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17751", "url": "https://access.redhat.com/errata/RHSA-2026:17751" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17752", "url": "https://access.redhat.com/errata/RHSA-2026:17752" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17753", "url": "https://access.redhat.com/errata/RHSA-2026:17753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17790", "url": "https://access.redhat.com/errata/RHSA-2026:17790" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17791", "url": "https://access.redhat.com/errata/RHSA-2026:17791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17792", "url": "https://access.redhat.com/errata/RHSA-2026:17792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17793", "url": "https://access.redhat.com/errata/RHSA-2026:17793" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17794", "url": "https://access.redhat.com/errata/RHSA-2026:17794" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:18029", "url": "https://access.redhat.com/errata/RHSA-2026:18029" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:18041", "url": "https://access.redhat.com/errata/RHSA-2026:18041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:18063", "url": "https://access.redhat.com/errata/RHSA-2026:18063" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19159", "url": "https://access.redhat.com/errata/RHSA-2026:19159" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19371", "url": "https://access.redhat.com/errata/RHSA-2026:19371" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19372", "url": "https://access.redhat.com/errata/RHSA-2026:19372" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19374", "url": "https://access.redhat.com/errata/RHSA-2026:19374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20442", "url": "https://access.redhat.com/errata/RHSA-2026:20442" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20444", "url": "https://access.redhat.com/errata/RHSA-2026:20444" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21275", "url": "https://access.redhat.com/errata/RHSA-2026:21275" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22382", "url": "https://access.redhat.com/errata/RHSA-2026:22382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22383", "url": "https://access.redhat.com/errata/RHSA-2026:22383" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22388", "url": "https://access.redhat.com/errata/RHSA-2026:22388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22389", "url": "https://access.redhat.com/errata/RHSA-2026:22389" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22390", "url": "https://access.redhat.com/errata/RHSA-2026:22390" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22393", "url": "https://access.redhat.com/errata/RHSA-2026:22393" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22394", "url": "https://access.redhat.com/errata/RHSA-2026:22394" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22396", "url": "https://access.redhat.com/errata/RHSA-2026:22396" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-42945", "url": "https://access.redhat.com/security/cve/CVE-2026-42945" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2477116", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477116" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42945.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42945.json" } ], "release_date": "2026-05-13T16:16:00Z", "remediations": [ { "category": "none_available", "date": "2026-09-18T15:38:33.551570Z", "details": "Affected", "product_ids": [ "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els3.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els5.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els6.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els7.noarch", "Oracle-Linux-7:nginx-all-modules-1:1.20.1-10.el7.tuxcare.els8.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els3.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els5.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els6.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els7.noarch", "Oracle-Linux-7:nginx-filesystem-1:1.20.1-10.el7.tuxcare.els8.noarch", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-devel-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-http-image-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-http-perl-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-http-xslt-filter-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-mail-1:1.20.1-10.el7.tuxcare.els8.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els3.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els5.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els6.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els7.x86_64", "Oracle-Linux-7:nginx-mod-stream-1:1.20.1-10.el7.tuxcare.els8.x86_64" ] } ] } ] }