Linux · Security advisory · August 24, 2026

ALSA-2026:59216: Security update for 9 packages

ALSA-2026:59216, released August 24, 2026, fixes 2 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0074
54th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
nginxalmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-all-modulesalmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-filesystemalmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-mod-develalmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-mod-http-image-filteralmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-mod-http-perlalmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-mod-http-xslt-filteralmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-mod-mailalmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1
nginx-mod-streamalmalinux 81:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-60005 NGINX ngx_http_slice_module vulnerability 8.2 0.0074 None reported
High CVE-2026-56434 NGINX ngx_http_ssi_module vulnerability 8.2 0.0049 None reported
Showing 1 to 2 of 2 1