Linux · Security advisory · May 19, 2026

ALSA-2026:19159: Security update for 10 packages

ALSA-2026:19159, released May 19, 2026, fixes 1 CVE across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
1
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6805
99th percentile

Fixed package versions

ProductReleaseFixed in
nginxalmalinux 102:1.26.3-6.el10_2.3
nginx-all-modulesalmalinux 102:1.26.3-6.el10_2.3
nginx-corealmalinux 102:1.26.3-6.el10_2.3
nginx-filesystemalmalinux 102:1.26.3-6.el10_2.3
nginx-mod-develalmalinux 102:1.26.3-6.el10_2.3
nginx-mod-http-image-filteralmalinux 102:1.26.3-6.el10_2.3
nginx-mod-http-perlalmalinux 102:1.26.3-6.el10_2.3
nginx-mod-http-xslt-filteralmalinux 102:1.26.3-6.el10_2.3
nginx-mod-mailalmalinux 102:1.26.3-6.el10_2.3
nginx-mod-streamalmalinux 102:1.26.3-6.el10_2.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerability 8.1 0.6805 None reported
Showing 1 to 1 of 1 1