Fedora alert FEDORA-2026-cd0705c6a7 (nginx)

From:
             
 
updates--- via package-announce <package-announce@lists.fedoraproject.org>
To:
             
 
package-announce@lists.fedoraproject.org
Subject:
             
 
[SECURITY] Fedora 43 Update: nginx-1.28.2-1.fc43
Date:
             
 
Sun, 15 Feb 2026 01:13:01 +0000
Message-ID:
             
 
<20260215011301.4B7FF7E803@bastion01.rdu3.fedoraproject.org>
Archive-link:
             
 
Article
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-cd0705c6a7
2026-02-15 01:10:21.966685+00:00
--------------------------------------------------------------------------------

Name        : nginx
Product     : Fedora 43
Version     : 1.28.2
Release     : 1.fc43
URL         : https://nginx.org
Summary     : A high performance web server and reverse proxy server
Description :
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and
IMAP protocols, with a strong focus on high concurrency, performance and low
memory usage.

--------------------------------------------------------------------------------
Update Information:

nginx-mod-naxsi:
Rebuild for 1.28.2
nginx-mod-brotli:
Rebuild for 1.28.2
nginx-mod-fancyindex:
Rebuild for 1.28.2
nginx-mod-modsecurity:
Rebuild for 1.28.2
nginx-mod-headers-more:
Rebuild for 1.28.2
nginx-mod-vts:
Rebuild for 1.28.2
nginx:
Update to 1.28.2
fixes CVE-2026-1642
move log directory to nginx-filesystem subpackage (PR#20)
delete Maxim Dounin's key, it's no longer listed on the nginx website
--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb  4 2026 Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-1
- Update to 1.28.2
- fixes CVE-2026-1642
- move log directory to nginx-filesystem subpackage (PR#20)
- delete Maxim Dounin's key, it's no longer listed on the nginx website
* Wed Feb  4 2026 Nicolas Chauvet <kwizart@gmail.com> - 2:1.28.1-6
- Move log/nginx in filesystem sub-package
* Tue Jan 27 2026 Luboš Uhliarik <luhliari@redhat.com> - 2:1.28.1-5
- Clarify binding behavior of -t option.
* Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2:1.28.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2436871 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on
TLS proxied connections [fedora-43]
        https://bugzilla.redhat.com/show_bug.cgi?id=2436871
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-cd0705c6a7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------



Attachment: None (type=text/plain)
-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond...
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/package-ann...
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new