[ubuntu/noble-security] nginx 1.24.0-2ubuntu7.13 (Accepted)

[Marc Deslauriers]

nginx (1.24.0-2ubuntu7.13) noble-security; urgency=medium

  * SECURITY UPDATE: heap overflow via large headers
    - debian/patches/CVE-2026-42055.patch: limit header length for HTTP/2 and
      gRPC in src/http/modules/ngx_http_grpc_module.c.
    - CVE-2026-42055
  * SECURITY UPDATE: heap overread in ngx_http_charset_module
    - debian/patches/CVE-2026-48142.patch: Charset: fixed another rare buffer
      overread in recode_from_utf8() in
      src/http/modules/ngx_http_charset_filter_module.c.
    - CVE-2026-48142

Date: 2026-06-19 14:15:12.744810+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.13
-------------- next part --------------
Sorry, changesfile not available.