[ubuntu/questing-security] nginx 1.28.0-6ubuntu1.8 (Accepted)

[Marc Deslauriers]

nginx (1.28.0-6ubuntu1.8) questing-security; urgency=medium

  * SECURITY UPDATE: heap overflow via large headers
    - debian/patches/CVE-2026-42055.patch: limit header length for HTTP/2 and
      gRPC in src/http/modules/ngx_http_grpc_module.c.
    - CVE-2026-42055
  * SECURITY UPDATE: heap overread in ngx_http_charset_module
    - debian/patches/CVE-2026-48142.patch: Charset: fixed another rare buffer
      overread in recode_from_utf8() in
      src/http/modules/ngx_http_charset_filter_module.c.
    - CVE-2026-48142

Date: 2026-06-19 15:26:15.320786+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.8
-------------- next part --------------
Sorry, changesfile not available.