[CLSA-2026:1791460658] Fix CVE(s): CVE-2026-42055
Type:
security
Severity:
Critical
Release date:
2026-10-08 11:57:52 UTC
Description:
* SECURITY UPDATE: buffer overflow in the gRPC upstream request builder via overlong HTTP/2 header fields - debian/patches/CVE-2026-42055.patch: reject a method name, URI, host, configured header name or value, or forwarded client header name or value longer than NGX_HTTP_V2_MAX_FIELD in ngx_http_grpc_create_request(), so an oversized field can no longer overflow the HPACK integer encoding the request buffer was sized for - CVE-2026-42055
CVEs fixed:
Updated packages:
  • libnginx-mod-http-auth-pam_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:7f2ee19576d37fa02827ab25c0d0d7b14529efa2
  • libnginx-mod-http-cache-purge_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:0d1d031e57aa4fce4b57c16319e342ac54330767
  • libnginx-mod-http-dav-ext_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:fe4289895e2dad90c75cb28d5994475f1f3f718d
  • libnginx-mod-http-echo_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:f8c95be096132a515f2011c71d5299bab7570ddc
  • libnginx-mod-http-fancyindex_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:8e7066e6719a6032cf5221dee9a35f57827cb9b9
  • libnginx-mod-http-geoip_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:2d3b1b8e5178ffee451f3b343df33a2712450305
  • libnginx-mod-http-geoip2_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:f8570bf7d1c9ecf9b4b4968879adb8f56f1ae737
  • libnginx-mod-http-headers-more-filter_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:b0bf3f66528f7e95e866b30ccefffae2c43ee55d
  • libnginx-mod-http-image-filter_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:bb10633e89b400debf1725fa821aec9a2f74c72e
  • libnginx-mod-http-lua_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:dfa4d65b9967ce8d7db19c0b126fba23d6f9fdda
  • libnginx-mod-http-ndk_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:e7507d93fc4330906b0f20492385d009dd921358
  • libnginx-mod-http-perl_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:9bedeb2fb8f2588f19951f5a3da4fac1cc7144ab
  • libnginx-mod-http-subs-filter_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:923ad2b2691b51592311b9fd3ef95a5126fbca1c
  • libnginx-mod-http-uploadprogress_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:772987530fe61ac426ee3c681f76a21ec8b6c750
  • libnginx-mod-http-upstream-fair_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:22bbcc2ef06c00fa2b077b054025048047ce3671
  • libnginx-mod-http-xslt-filter_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:f69444a3a0558d2c00d1b0868451574eaed72913
  • libnginx-mod-mail_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:918bc06185eec5d73667c8495548830d82ca3bce
  • libnginx-mod-nchan_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:d936ba2b77ab7c9b0358e401b50008688045aabc
  • libnginx-mod-rtmp_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:7011ee7360f638db45a02043a4b5375801bf1e90
  • libnginx-mod-stream_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:bc0d451244a41aa2c73438dd0e0792816ad4aac3
  • nginx_1.18.0-0ubuntu1.7+tuxcare.els9_all.deb
    sha:c735e7b6d9d4114dd8dfbca647e6dd3dae0803ef
  • nginx-common_1.18.0-0ubuntu1.7+tuxcare.els9_all.deb
    sha:63b6092b0885ae7c5cff423b696e5ce78170cacb
  • nginx-core_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:eed444f1f23daacb2aaa95815f2807fca5d3639a
  • nginx-doc_1.18.0-0ubuntu1.7+tuxcare.els9_all.deb
    sha:b59208569729b9637d91479eed6c3ae1c44ceb81
  • nginx-extras_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:b2490e14ad138a37d40e7fe4e80f8a8334dd6211
  • nginx-full_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:1390f0c618c23e0449af191bad40c0a669b4d384
  • nginx-light_1.18.0-0ubuntu1.7+tuxcare.els9_amd64.deb
    sha:18a58b6f4b0e1c9dfa30e4c6c539bfe7dfbcccdc
  • libnginx-mod-http-auth-pam_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:06f7b7ac01ac105c5bab6c1cdfdf1af1478adf94
  • libnginx-mod-http-cache-purge_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:94a05a682b47b8226d3fa0c00532f665bcdae2e4
  • libnginx-mod-http-dav-ext_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:30b289bbc522cf70eb87ffb49a9c40bd32ac1619
  • libnginx-mod-http-echo_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:101d4048006fefeb25c1d5ea890a3b215b18a186
  • libnginx-mod-http-fancyindex_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:c75010cba4f2d0b1c7fc08e83d9cbdb2956a1e7c
  • libnginx-mod-http-geoip_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:2a12e27ec138f5f5b92511fd11ab93bf2c0ed43b
  • libnginx-mod-http-geoip2_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:380e867d750da36019922cec95cfc6dd4ae0de1b
  • libnginx-mod-http-headers-more-filter_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:beca4c3e904063e60dfc384e206b59da2c29c3b9
  • libnginx-mod-http-image-filter_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:c999ae4e3937408373ff56a13665ec16ebcadeb7
  • libnginx-mod-http-lua_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:c7b37e7069336be685e9e04afcf4becc56a72761
  • libnginx-mod-http-ndk_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:c0fd967f7293247cb4ff9a476e8f69f4c276b199
  • libnginx-mod-http-perl_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:57bc6ffcb5bf8750e416533afc2d78e504f14a74
  • libnginx-mod-http-subs-filter_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:71d944ccd6c86b224bad2ed95a3dd10160c7d247
  • libnginx-mod-http-uploadprogress_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:cb786e00c4e23c306219d5275dfc2cfcfc9f89c8
  • libnginx-mod-http-upstream-fair_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:3b5ac87a1ce454b60e30a4d95d8b3992dc07cd76
  • libnginx-mod-http-xslt-filter_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:00e51edc70799fbfd9f81e0c742a9c8abce0ee07
  • libnginx-mod-mail_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:a21f24aae080d47b656a87d1aaae07ef5f374d49
  • libnginx-mod-nchan_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:52d1b63136f59ddc3f344e3d1a92749e53b187c3
  • libnginx-mod-rtmp_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:30942a99917e888636b7acde41245da372678c0e
  • libnginx-mod-stream_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:7f2c4f7b6ae41afb84336a4d87fa0e65226bd430
  • nginx-core_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:512de9fff7b53ed6d881d2d60da95bd3c1cb0b2d
  • nginx-extras_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:4bd59d36a7bdd1ae84afbfbcdd635bb8ee5194c6
  • nginx-full_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:f3e45577c593070ec9c1214bdee5dbbeed2da7e1
  • nginx-light_1.18.0-0ubuntu1.7+tuxcare.els9_arm64.deb
    sha:4e29416bd84ebb9c6076ffa7014bf101cfef3c7f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.