Release date:
2026-09-24 15:09:59 UTC
Description:
* SECURITY UPDATE: memory exhaustion via an excessive number of request headers
- debian/patches/CVE-2026-49975.patch: add the max_headers directive limiting
the number of request header lines accepted per request (default 1000) for
HTTP/1 and HTTP/2
- CVE-2026-49975
Updated packages:
-
nginx_1.10.3-0ubuntu0.16.04.8+tuxcare.els11_all.deb
sha:39a589911435ed541674940669831b0408733f36
-
nginx-common_1.10.3-0ubuntu0.16.04.8+tuxcare.els11_all.deb
sha:e6f03b245edb4a80c672fd439743b906e475ca7f
-
nginx-core_1.10.3-0ubuntu0.16.04.8+tuxcare.els11_amd64.deb
sha:9eb7bcdb6574a421a8093e2049c0fb67c65d9497
-
nginx-doc_1.10.3-0ubuntu0.16.04.8+tuxcare.els11_all.deb
sha:de23d4075f08a1fbdda46e842968b5a8c3f71518
-
nginx-extras_1.10.3-0ubuntu0.16.04.8+tuxcare.els11_amd64.deb
sha:8235aa841eae1d9c3c2a1447cde838936b2ee30e
-
nginx-full_1.10.3-0ubuntu0.16.04.8+tuxcare.els11_amd64.deb
sha:0f121f4980efc88faa0fc6d9d57c3fbd071c216b
-
nginx-light_1.10.3-0ubuntu0.16.04.8+tuxcare.els11_amd64.deb
sha:3d1913437b9cf6d911bc4c2862073c5a463703b4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
