[ubuntu/jammy-security] nginx 1.18.0-6ubuntu14.16 (Accepted)

[Marc Deslauriers]

nginx (1.18.0-6ubuntu14.16) jammy-security; urgency=medium

  * SECURITY UPDATE: heap overflow via large headers
    - debian/patches/CVE-2026-42055.patch: limit header length for HTTP/2 and
      gRPC in src/http/modules/ngx_http_grpc_module.c.
    - CVE-2026-42055
  * SECURITY UPDATE: heap overread in ngx_http_charset_module
    - debian/patches/CVE-2026-48142.patch: Charset: fixed another rare buffer
      overread in recode_from_utf8() in
      src/http/modules/ngx_http_charset_filter_module.c.
    - CVE-2026-48142

Date: 2026-06-19 14:33:11.558671+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.16
-------------- next part --------------
Sorry, changesfile not available.