# CVE-2025-23419: libnginx-mod-http-geoip: When multiple server blocks are configured to share the same IP address andport, an attacker can use session resumpti...

CVE-2025-23419 is fixed in 44 products on 1 platform, first by libnginx-mod-http-auth-pam 1.18.0-0ubuntu1.7, released February 5, 2025. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2025-23419
- Priority: Routine
- CVSS: 4.3 (Medium)
- EPSS: 0.0280
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 5, 2025

## Description

When multiple server blocks are configured to share the same IP address andport, an attacker can use session resumption to bypass client certificateauthentication requirements on these servers. This vulnerability ariseswhen  TLS Session Ticketshttps://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the  SSL session cachehttps://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cacheare used in the default server and the default server is performing clientcertificate authentication.Note: Software versions which have reached End of Technical Support (EoTS)are not evaluated.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libnginx-mod-http-auth-pam Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-auth-pam 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-auth-pam-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-auth-pam Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-auth-pam 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-auth-pam-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-cache-purge Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-cache-purge 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-cache-purge-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-cache-purge Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-cache-purge 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-cache-purge-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-dav-ext Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-dav-ext 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-dav-ext-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-dav-ext Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-dav-ext 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-dav-ext-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-echo Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-echo 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-echo-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-echo Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-echo 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-echo-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-fancyindex Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-fancyindex 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-fancyindex-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-fancyindex Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-fancyindex 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-fancyindex-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-geoip Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-geoip 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-geoip-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-geoip Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-geoip 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-geoip-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-geoip Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [libnginx-mod-http-geoip 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnginx-mod-http-geoip-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-geoip Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [libnginx-mod-http-geoip 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnginx-mod-http-geoip-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | libnginx-mod-http-geoip2 Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-geoip2 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-geoip2-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-geoip2 Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-geoip2 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-geoip2-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-headers-more-filter Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-headers-more-filter 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-headers-more-filter-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-headers-more-filter Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-headers-more-filter 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-headers-more-filter-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-image-filter Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-image-filter 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-image-filter-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-image-filter Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-image-filter 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-image-filter-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-image-filter Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [libnginx-mod-http-image-filter 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnginx-mod-http-image-filter-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-image-filter Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [libnginx-mod-http-image-filter 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnginx-mod-http-image-filter-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | libnginx-mod-http-lua Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-lua 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-lua-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-ndk Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-ndk 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-ndk-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-ndk Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-ndk 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-ndk-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-perl Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-perl 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-perl-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-perl Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-perl 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-perl-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-perl Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [libnginx-mod-http-perl 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnginx-mod-http-perl-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-perl Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [libnginx-mod-http-perl 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnginx-mod-http-perl-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | libnginx-mod-http-subs-filter Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-subs-filter 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-subs-filter-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-subs-filter Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-subs-filter 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-subs-filter-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-uploadprogress Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-uploadprogress 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-uploadprogress-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-uploadprogress Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-uploadprogress 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-uploadprogress-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-upstream-fair Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-upstream-fair 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-upstream-fair-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-upstream-fair Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-upstream-fair 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-upstream-fair-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-xslt-filter Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-http-xslt-filter 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-http-xslt-filter-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-xslt-filter Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-http-xslt-filter 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-http-xslt-filter-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-xslt-filter Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [libnginx-mod-http-xslt-filter 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnginx-mod-http-xslt-filter-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | libnginx-mod-http-xslt-filter Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [libnginx-mod-http-xslt-filter 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnginx-mod-http-xslt-filter-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | libnginx-mod-mail Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-mail 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-mail-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-mail Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-mail 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-mail-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-mail Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [libnginx-mod-mail 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnginx-mod-mail-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | libnginx-mod-mail Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [libnginx-mod-mail 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnginx-mod-mail-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | libnginx-mod-nchan Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-nchan 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-nchan-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-nchan Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-nchan 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-nchan-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-rtmp Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-rtmp 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-rtmp-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-rtmp Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-rtmp 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-rtmp-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-stream Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [libnginx-mod-stream 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnginx-mod-stream-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | libnginx-mod-stream Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-stream 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-stream-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-stream Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [libnginx-mod-stream 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnginx-mod-stream-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | libnginx-mod-stream Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [libnginx-mod-stream 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnginx-mod-stream-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | libnginx-mod-stream-geoip Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-stream-geoip 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-stream-geoip-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | libnginx-mod-stream-geoip Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [libnginx-mod-stream-geoip 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libnginx-mod-stream-geoip-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | libnginx-mod-stream-geoip Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [libnginx-mod-stream-geoip 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libnginx-mod-stream-geoip-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | libnginx-mod-stream-geoip2 Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [libnginx-mod-stream-geoip2 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libnginx-mod-stream-geoip2-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | nginx Debian 12.15 (bookworm) | 1.22.1-9+deb12u1 | [DEBIAN-CVE-2025-23419](https://patchblox.com/security/data/fix/linux/debian-cve-2025-23419.md) | Feb 5, 2025 |
| Linux | nginx Debian 13.5 (trixie) | 1.26.3-2 | [DEBIAN-CVE-2025-23419](https://patchblox.com/security/data/fix/linux/debian-cve-2025-23419.md) | Feb 5, 2025 |
| Linux | nginx Debian 14 | 1.26.3-2 | [DEBIAN-CVE-2025-23419](https://patchblox.com/security/data/fix/linux/debian-cve-2025-23419.md) | Feb 5, 2025 |
| Linux | nginx RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [nginx 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-nginx-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | nginx Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [nginx 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-nginx-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | nginx Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [nginx 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-nginx-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | nginx Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [nginx 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-nginx-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | nginx amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-all-modules RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-all-modules amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-all-modules ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-common Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [nginx-common 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-nginx-common-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | nginx-common Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [nginx-common 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-nginx-common-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | nginx-common Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [nginx-common 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-nginx-common-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | nginx-common Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [nginx-common 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-nginx-common-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | nginx-core RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-core Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [nginx-core 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-nginx-core-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | nginx-core Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [nginx-core 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-nginx-core-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | nginx-core Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [nginx-core 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-nginx-core-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | nginx-core Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [nginx-core 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-nginx-core-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | nginx-core amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-core ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-core-debuginfo amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-debuginfo amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-debugsource amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-extras Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [nginx-extras 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-nginx-extras-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | nginx-extras Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [nginx-extras 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-nginx-extras-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | nginx-extras Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [nginx-extras 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-nginx-extras-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | nginx-extras Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [nginx-extras 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-nginx-extras-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | nginx-filesystem RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-filesystem amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-filesystem ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-full Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [nginx-full 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-nginx-full-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | nginx-full Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [nginx-full 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-nginx-full-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | nginx-full Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [nginx-full 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-nginx-full-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | nginx-full Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [nginx-full 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-nginx-full-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | nginx-light Ubuntu 20.04 LTS (focal) | 1.18.0-0ubuntu1.7 | [nginx-light 1.18.0-0ubuntu1.7](https://patchblox.com/security/data/fix/linux/ubuntu-focal-nginx-light-1.18.0-0ubuntu1.7.md) | Feb 5, 2025 |
| Linux | nginx-light Ubuntu 22.04.1 LTS (jammy) | 1.18.0-6ubuntu14.6 | [nginx-light 1.18.0-6ubuntu14.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-nginx-light-1.18.0-6ubuntu14.6.md) | Feb 5, 2025 |
| Linux | nginx-light Ubuntu 24.04.5 LTS (noble) | 1.24.0-2ubuntu7.3 | [nginx-light 1.24.0-2ubuntu7.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-nginx-light-1.24.0-2ubuntu7.3.md) | Feb 5, 2025 |
| Linux | nginx-light Ubuntu 24.10 (oracular) | 1.26.0-2ubuntu3.2 | [nginx-light 1.26.0-2ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-nginx-light-1.26.0-2ubuntu3.2.md) | Jan 16, 2026 |
| Linux | nginx-mod-devel RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-mod-devel amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-devel ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-mod-http-image-filter RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-mod-http-image-filter amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-http-image-filter ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-mod-http-image-filter-debuginfo amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-http-perl RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-mod-http-perl amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-http-perl ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-mod-http-perl-debuginfo amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-http-xslt-filter RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-mod-http-xslt-filter amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-http-xslt-filter ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-mod-http-xslt-filter-debuginfo amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-mail RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-mod-mail amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-mail ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-mod-mail-debuginfo amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-stream RHEL 9 | 2:1.20.1-22.el9 | [RHSA-2025:7331](https://patchblox.com/security/data/fix/linux/rhsa-2025-7331.md) | May 13, 2025 |
| Linux | nginx-mod-stream amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |
| Linux | nginx-mod-stream ol 9 | 2:1.20.1-22.0.1.el9 | [ELSA-2025-7331](https://patchblox.com/security/data/fix/linux/elsa-2025-7331.md) | May 16, 2025 |
| Linux | nginx-mod-stream-debuginfo amzn 2023 | 1:1.26.3-1.amzn2023.0.1 | [ALAS2023-2025-842](https://patchblox.com/security/data/fix/linux/alas2023-2025-842.md) | Feb 12, 2025 |

---

Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.