gpp_maybe Security update for nginx

SUSE-SLE-Module-Server-Applications-15-SP7-2026-1761

This update for nginx fixes the following issues: - CVE-2026-1642: plain text data injection into the response from an upstream proxied server via MITM attack (bsc#1257675). - CVE-2026-27654: buffer overflow in the NGINX worker process via the `ngx_http_dav_module` module (bsc#1260416). - CVE-2026-27784: NGINX worker memory overread or overwrite via a specially crafted MP4 file (bsc#1260417). - CVE-2026-28753: arbitrary header injection into SMTP upstream requests via attacker-controlled DNS server (bsc#1260418).

• Release Date
  May 8 2026
• References
  Bugzilla: 1257675, 1260416, 1260417, 1260418
  CVEs: CVE-2026-1642, CVE-2026-27654, CVE-2026-27784, CVE-2026-28753
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 ppc64le

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.15.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.15.1 lock rpm

Server Applications Module 15.7 x86_64

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.15.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.15.1 lock rpm

Server Applications Module 15.7 aarch64

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.15.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.15.1 lock rpm

Server Applications Module 15.7 s390x

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.15.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.15.1 lock rpm