[ubuntu/questing-updates] nginx 1.28.0-6ubuntu1.2 (Accepted)

[Ubuntu Archive Robot]

nginx (1.28.0-6ubuntu1.2) questing-security; urgency=medium

  * SECURITY UPDATE: process crash in ngx_mail_auth_http_module
    - debian/patches/CVE-2026-27651.patch: fixed clearing s->passwd in auth
      http requests in src/mail/ngx_mail_auth_http_module.c.
    - CVE-2026-27651
  * SECURITY UPDATE: buffer overflow in ngx_http_dav_module module
    - debian/patches/CVE-2026-27654.patch: add destination length
      validation for COPY and MOVE in
      src/http/modules/ngx_http_dav_module.c.
    - CVE-2026-27654
  * SECURITY UPDATE: buffer overflow in ngx_http_mp4_module module
    - debian/patches/CVE-2026-27784.patch: fixed possible integer overflow
      on 32-bit platforms in src/http/modules/ngx_http_mp4_module.c.
    - CVE-2026-27784
  * SECURITY UPDATE: header injection in ngx_mail_smtp_module module
    - debian/patches/CVE-2026-28753.patch: add  host validation in
      src/mail/ngx_mail_smtp_handler.c.
    - CVE-2026-28753
  * SECURITY UPDATE: cert validation issue in ngx_stream_ssl_module module
    - debian/patches/CVE-2026-28755.patch: fixed client certificate
      validation with OCSP in src/stream/ngx_stream_ssl_module.c.
    - CVE-2026-28755
  * SECURITY UPDATE: buffer overflow in ngx_http_mp4_module module
    - debian/patches/CVE-2026-32647.patch: avoid zero size buffers in
      output in src/http/modules/ngx_http_mp4_module.c.
    - CVE-2026-32647

Date: 2026-04-23 12:31:11.639368+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.