[CLSA-2026:1784714136] nginx: Fix of CVE-2026-42055
Type:
security
Severity:
Low
Release date:
2026-07-22 09:56:09 UTC
Description:
- CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream with oversized (>2M) request header fields
CVEs fixed:
Updated packages:
  • nginx-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.x86_64.rpm
    sha:16b7a90bdd1617c1c0e06b521a1f7e91ba3b87a7b8dae4d7b1291ea7f42c58fd
  • nginx-all-modules-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.noarch.rpm
    sha:c1a6c68c82c506673b6a5d588bfce6f776e43bbedf9e4a55af3bd28b477a2901
  • nginx-filesystem-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.noarch.rpm
    sha:bff803d0c1b8a42edbf12eca952cfe145972cac56e6a1460e22b3279502a68fe
  • nginx-mod-http-image-filter-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.x86_64.rpm
    sha:c3a5dcb14e9f0209533c616e28322c7c3484de550148752ad397317dc5d55339
  • nginx-mod-http-perl-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.x86_64.rpm
    sha:f1c02063212053a9ff73587e140128ab95e7661fe00c6d5cefc24a77a8898cb6
  • nginx-mod-http-xslt-filter-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.x86_64.rpm
    sha:3e3b1ab05428730855d63537baa993e1530d2c9a9749fce1346d654d9205e463
  • nginx-mod-mail-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.x86_64.rpm
    sha:7a4c68d83125367d30cadac59be8a7f24c33983991eebdf0ebde47a756306d7a
  • nginx-mod-stream-1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11.x86_64.rpm
    sha:f6d457acc71a5673586f7ff38ad69d88012fe1ca17b960865fbc37a4326665c7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.