[ubuntu/resolute-security] nginx 1.28.3-2ubuntu1.6 (Accepted)

[Marc Deslauriers]

nginx (1.28.3-2ubuntu1.6) resolute-security; urgency=medium

  * SECURITY UPDATE: heap overflow via large headers
    - debian/patches/CVE-2026-42055.patch: limit header length for HTTP/2 and
      gRPC in src/http/modules/ngx_http_grpc_module.c.
    - CVE-2026-42055
  * SECURITY UPDATE: heap overread in ngx_http_charset_module
    - debian/patches/CVE-2026-48142.patch: Charset: fixed another rare buffer
      overread in recode_from_utf8() in
      src/http/modules/ngx_http_charset_filter_module.c.
    - CVE-2026-48142

Date: 2026-06-19 13:49:11.005980+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.6
-------------- next part --------------
Sorry, changesfile not available.