nginx security updates for NethServer 8 and NethSecurity 8 applications

[nrauso]

Recent nginx security advisories report vulnerabilities affecting nginx and some nginx modules, including ngx_http_rewrite_module as described in CVE-2026-42945.

This issue is a tracking note to verify whether the nginx version and modules currently used by NethServer 8 and NethSecurity 8 applications are affected, and to assess the conditions required to update nginx safely across the affected components.

References

• https://nginx.org/en/security_advisories.html
• https://www.cve.org/CVERecord?id=CVE-2026-42945
• https://my.f5.com/manage/s/article/K000161019