[ubuntu/jammy-updates] nginx 1.18.0-6ubuntu14.10 (Accepted)

[Ubuntu Archive Robot]

nginx (1.18.0-6ubuntu14.10) jammy-security; urgency=medium

  * SECURITY UPDATE: process crash in ngx_mail_auth_http_module
    - debian/patches/CVE-2026-27651.patch: fixed clearing s->passwd in auth
      http requests in src/mail/ngx_mail_auth_http_module.c.
    - CVE-2026-27651
  * SECURITY UPDATE: buffer overflow in ngx_http_dav_module module
    - debian/patches/CVE-2026-27654.patch: add destination length
      validation for COPY and MOVE in
      src/http/modules/ngx_http_dav_module.c.
    - CVE-2026-27654
  * SECURITY UPDATE: buffer overflow in ngx_http_mp4_module module
    - debian/patches/CVE-2026-27784.patch: fixed possible integer overflow
      on 32-bit platforms in src/http/modules/ngx_http_mp4_module.c.
    - CVE-2026-27784
  * SECURITY UPDATE: header injection in ngx_mail_smtp_module module
    - debian/patches/CVE-2026-28753.patch: add  host validation in
      src/mail/ngx_mail_smtp_handler.c.
    - CVE-2026-28753
  * SECURITY UPDATE: buffer overflow in ngx_http_mp4_module module
    - debian/patches/CVE-2026-32647.patch: avoid zero size buffers in
      output in src/http/modules/ngx_http_mp4_module.c.
    - CVE-2026-32647

Date: 2026-04-24 15:52:10.869334+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.10
-------------- next part --------------
Sorry, changesfile not available.