Linux · Security advisory · September 14, 2026

ALSA-2026:67308: Security update for 10 packages

ALSA-2026:67308, released September 14, 2026, fixes 1 CVE across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
1
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0630
93rd percentile

Fixed package versions

ProductReleaseFixed in
nginxalmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-all-modulesalmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-corealmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-filesystemalmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-mod-develalmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-mod-http-image-filteralmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-mod-http-perlalmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-mod-http-xslt-filteralmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-mod-mailalmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1
nginx-mod-streamalmalinux 91:1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-42533 NGINX Map directive and Regex matching vulnerability 8.1 0.0630 None reported
Showing 1 to 1 of 1 1