[CLSA-2026:1784714664] nginx: Fix of CVE-2026-42055
Type:
security
Severity:
Low
Release date:
2026-07-22 10:04:49 UTC
Description:
- CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream with oversized (>2M) request header fields
CVEs fixed:
Updated packages:
  • nginx-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.x86_64.rpm
    sha:c1de0c670d8327288bea202dccbcf72bcda1b346836b775e9f1bbee20dfa851e
  • nginx-all-modules-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.noarch.rpm
    sha:3ef9abf3ad13dbdb35c484a3f128fb0abfa8d45d859a399bba315aa8e56c1382
  • nginx-filesystem-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.noarch.rpm
    sha:19a2d6154b92bc5b91ae776ecb5efe4bb4d1fcf6203331d81c2063ad02259b74
  • nginx-mod-http-image-filter-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.x86_64.rpm
    sha:b777b6c005e3c15d2f82497d0f8948d1a126e5ac70552994879ae22cc46fb326
  • nginx-mod-http-perl-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.x86_64.rpm
    sha:02bd4aebae714390663120c69dde638c6e82cd0887a589e5ec61773049a902ba
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.x86_64.rpm
    sha:d0daf43efc13f133c89d133327fefa78f8ce935f5e9834fb15a54336f6818de2
  • nginx-mod-mail-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.x86_64.rpm
    sha:7dab0cd9e97ef63d03850d711d53294baf4eaea04659429e2591aed958127077
  • nginx-mod-stream-1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11.x86_64.rpm
    sha:48bd87b231c9e8aa3bc7f74399be3a68a9868e9c12b7f811e49568e6702c1df5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.