[CLSA-2026:1784714329] nginx: Fix of CVE-2026-42055
Type:
security
Severity:
Low
Release date:
2026-07-22 09:59:14 UTC
Description:
- CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream with oversized (>2M) request header fields
CVEs fixed:
Updated packages:
  • nginx-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.x86_64.rpm
    sha:7cb0e4c0324fa3b2b408934c41f5888c8f6b4cef853c6e9397c050ba7cb23a4d
  • nginx-all-modules-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.noarch.rpm
    sha:eea99c88bf3ecd5a8f582533da46c7f1c9fc4e28a2f3ce3bc5f42aa3c7d2306e
  • nginx-filesystem-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.noarch.rpm
    sha:8734dc9f54482ac34c73cbc76d757d59f26b458faecb8629c6cdeb647f13602d
  • nginx-mod-http-image-filter-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.x86_64.rpm
    sha:7c04445764e4b5e15efc07c75526620da18de833c2ea1d8c72d5192cd09b2e56
  • nginx-mod-http-perl-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.x86_64.rpm
    sha:ff78ff42619b35087c2203fa05bce80f9f39c4c0f4898e7d089811ec0e518c54
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.x86_64.rpm
    sha:8a6c25abe882cf80f2682afe63b367bf93d94ad7569f5fd091c4ccd48eed8f50
  • nginx-mod-mail-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.x86_64.rpm
    sha:b0849bee9bf86d30ea6feffbfb1c7fbf1ac462a46a78f8a451fcb7485b5fe4b6
  • nginx-mod-stream-1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11.x86_64.rpm
    sha:5c9a7044aade1403ce5d8ce46b545461a00d295781eacbc42d2b3b8884015c6f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.