Package "nginx-full"
| Name: |
nginx-full
|
Description: |
nginx web/proxy server (standard version with 3rd parties)
|
| Latest version: |
1.28.3-2ubuntu1.10 |
| Release: |
resolute (26.04) |
| Level: |
updates |
| Repository: |
universe |
| Head package: |
nginx |
| Homepage: |
https://nginx.org |
Links
Download "nginx-full"
Other versions of "nginx-full" in Resolute
Changelog
|
nginx (1.28.3-2ubuntu1.6) resolute-security; urgency=medium
* SECURITY UPDATE: heap overflow via large headers
- debian/patches/CVE-2026-42055.patch: limit header length for HTTP/2 and
gRPC in src/http/modules/ngx_http_grpc_module.c.
- CVE-2026-42055
* SECURITY UPDATE: heap overread in ngx_http_charset_module
- debian/patches/CVE-2026-48142.patch: Charset: fixed another rare buffer
overread in recode_from_utf8() in
src/http/modules/ngx_http_charset_filter_module.c.
- CVE-2026-48142
-- Marc Deslauriers <email address hidden> Fri, 19 Jun 2026 09:25:16 -0400
|
| CVE-2026-42055 |
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists whe |
| CVE-2026-48142 |
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location blo |
|
About
-
Send Feedback to @ubuntu_updates
