SUSE alert openSUSE-SU-2026:21524-1 (nginx) [LWN.net]

admin 






From:
 
[email protected]




To:
 
[email protected]




Subject:
 
openSUSE-SU-2026:21524-1: important: Security update for nginx




Date:
 
Wed, 05 Aug 2026 17:52:00 +0200




Message-ID:
 
<[email protected]>




Archive-link:
 
Article





openSUSE security update: security update for nginx

————————————————————-


Announcement ID: openSUSE-SU-2026:21524-1

Rating: important

References:


  * bsc#1271514


Cross-References:


  * CVE-2026-42533


CVSS scores:


  * CVE-2026-42533 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  * CVE-2026-42533 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N


Affected Products:


         openSUSE Leap 16.0


————————————————————-


An update that solves one vulnerability and has one bug fix can now be installed.


Description:


This update for nginx fixes the following issue


– CVE-2026-42533: map directive and regex matching vulnerability (bsc#1271514).


Patch instructions:


   To install this openSUSE security update use the suse recommended installation methods

   like YaST online_update or “zypper patch”.

   Alternatively you can run the command listed for your product:


– openSUSE Leap 16.0


   zypper in -t patch openSUSE-Leap-16.0-1427=1


Package List:


– openSUSE Leap 16.0:


  nginx-1.27.2-160000.7.1

  nginx-source-1.27.2-160000.7.1


References:


  * https://www.suse.com/security/cve/CVE-2026-42533.html



            


Read more here: Source link