Skip to content

nginx update: fixed versions by distro

Every tracked distribution release and image, with the package version that counts as fixed and the vendor's own page.

Last checked 23 Oct 2026 07:05 UTCLast changed 26 Oct 2026 05:47 UTC

Overall: Partly fixed
Severity: High8.2CVSS v3.1Red Hat
Last checked: 23 Oct 2026 07:05 UTC

Check your version

Alpine Linux

2 of 2 fixed

Alpine Linux
Release	Package	Fixed version	State	Verified	Source
Alpine 3.24	nginx	1.30.4-r0	Fixed	26 Oct 2026 05:22 UTC	Source
edge(development)	nginx	1.30.4-r0	Fixed	26 Oct 2026 05:22 UTC	Source

Red Hat Enterprise Linux

5 of 5 fixed

Red Hat Enterprise Linux
Release	Package	Fixed version	State	Verified	Source
Red Hat Enterprise Linux 10	nginx	2:1.26.3-6.el10_2.7	Fixed	26 Oct 2026 05:09 UTC	RHSA-2026:67314
Red Hat Enterprise Linux 8	nginx:1.24/nginx	1:1.24.0-3.module+el8.10.0+24848+0300f002.5	Fixed	26 Oct 2026 05:09 UTC	RHSA-2026:67315
Red Hat Enterprise Linux 9	nginx:1.24/nginx	1:1.24.0-7.module+el9.8.0+24846+e7eec568.5	Fixed	26 Oct 2026 05:09 UTC	RHSA-2026:67308
Red Hat Enterprise Linux 9	nginx:1.26/nginx	2:1.26.3-9.module+el9.8.0+24845+a897661e.4	Fixed	26 Oct 2026 05:09 UTC	RHSA-2026:67283
Red Hat Enterprise Linux 9	nginx	2:1.20.1-28.el9_8.6	Fixed	26 Oct 2026 05:09 UTC	RHSA-2026:66542

Debian

4 of 4 fixed

Debian
Release	Package	Fixed version	State	Verified	Source
12(bookworm) security (LTS team)	nginx	1.22.1-9+deb12u10	Fixed	26 Oct 2026 05:19 UTC	Source
forky(testing)	nginx	1.30.4-3	Fixed	26 Oct 2026 05:19 UTC	Source
sid(unstable)	nginx	1.30.4-3	Fixed	26 Oct 2026 05:19 UTC	Source
13(trixie) security	nginx	1.26.3-3+deb13u8	Fixed	26 Oct 2026 05:19 UTC	Source

Ubuntu

4 of 4 fixed

Ubuntu
Release	Package	Fixed version	State	Verified	Source
24.04 LTS(noble)	nginx	1.24.0-2ubuntu7.18	Fixed	26 Oct 2026 05:09 UTC	USN-8563-5
26.04 LTS(resolute)	nginx	1.28.3-2ubuntu1.11	Fixed	26 Oct 2026 05:09 UTC	USN-8563-5
22.04 LTS(jammy)	nginx	1.18.0-6ubuntu14.21	Fixed	26 Oct 2026 05:09 UTC	USN-8563-5
26.10(stonking)	nginx	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source