NGINX Rift (CVE-2026-42945) Patches Released (opens in new tab)

Update: Patched nginx is now in production2026-05-14 22:41 UTC: Patched nginx packages are now rolling out to the AlmaLinux production repositories for every supported release. This covers the default nginx package on AlmaLinux 8, 9, 10, and Kitten 10, and every nginx module stream we ship on AlmaLinux 8 (nginx:1.16, nginx:1.18, nginx:1.20, nginx:1.22, nginx:1.24) and AlmaLinux 9 (nginx:1.24, nginx:1.26). You no longer need to enable the testing repo. Just run: