[CLSA-2026:1783589275] nginx: Fix of CVE-2026-49975
Type:
security
Severity:
Important
Release date:
2026-07-09 09:28:12 UTC
Description:
1.24.0.tuxcare.els3-r0: - CVE-2026-49975 added max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)
CVEs fixed:
Updated packages:
  • nginx-1.24.0.tuxcare.els3-r0.apk
    sha:Q1OYOYujZ2Smq7AGM/cF8e7JI8mjI=
  • nginx-1.24.0.tuxcare.els3-r0.apk
    sha:Q1r59El9bbfiHNw6OnIQnli3PesP8=
  • nginx-debug-1.24.0.tuxcare.els3-r0.apk
    sha:Q1rsACSah/oRxIG8NHIgMv0HdYdfg=
  • nginx-debug-1.24.0.tuxcare.els3-r0.apk
    sha:Q1xRI6JqGGy5PA3QU/tJtrHUUreV0=
  • nginx-doc-1.24.0.tuxcare.els3-r0.apk
    sha:Q1QuX9C5zoymn8Pidr3qmEeOkLMm4=
  • nginx-doc-1.24.0.tuxcare.els3-r0.apk
    sha:Q13xsXlkQUKgWXS956sZeQkKLifMA=
  • nginx-mod-devel-kit-1.24.0.tuxcare.els3-r0.apk
    sha:Q1uqnMveweFPj4LPFwukabZT3AkVA=
  • nginx-mod-devel-kit-1.24.0.tuxcare.els3-r0.apk
    sha:Q18WmIHp0mb9zue6UgEUr2UlsDiko=
  • nginx-mod-http-accounting-1.24.0.tuxcare.els3-r0.apk
    sha:Q1FVz3Iu79bztEJLkilkleWJIx5yg=
  • nginx-mod-http-accounting-1.24.0.tuxcare.els3-r0.apk
    sha:Q1ETpNSeQKdkL5fWcTGlYFD3hXYAg=
  • nginx-mod-http-array-var-1.24.0.tuxcare.els3-r0.apk
    sha:Q1zvVBHgVBBwYa0JSFGBIbon3iagM=
  • nginx-mod-http-array-var-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Wa6lf3obSp36SMgbxKyodFEBOc0=
  • nginx-mod-http-auth-jwt-1.24.0.tuxcare.els3-r0.apk
    sha:Q1qHyu15/TG+cg9ezuATvo98PLUR8=
  • nginx-mod-http-auth-jwt-1.24.0.tuxcare.els3-r0.apk
    sha:Q10nIL6sMsp9QyvTtMXbYPMZShAEE=
  • nginx-mod-http-brotli-1.24.0.tuxcare.els3-r0.apk
    sha:Q19VkYVQG4miSq4NFzKiWM4Z4wV1A=
  • nginx-mod-http-brotli-1.24.0.tuxcare.els3-r0.apk
    sha:Q1pM9vwQXOtbjrhmlDhWQWflpc2po=
  • nginx-mod-http-cache-purge-1.24.0.tuxcare.els3-r0.apk
    sha:Q1/GQB0TUj91S6h2wFcAAPu1HDQY0=
  • nginx-mod-http-cache-purge-1.24.0.tuxcare.els3-r0.apk
    sha:Q16uaqvcTgaEnox8DR3jJBjmdnChw=
  • nginx-mod-http-cookie-flag-1.24.0.tuxcare.els3-r0.apk
    sha:Q1XUCNa4Sk+ohxRS/kOJ2pOtpU0rE=
  • nginx-mod-http-cookie-flag-1.24.0.tuxcare.els3-r0.apk
    sha:Q1SIR2OaaMToxXuNDi3Cz96uv6u9c=
  • nginx-mod-http-dav-ext-1.24.0.tuxcare.els3-r0.apk
    sha:Q19h+T4zdm5RUUjzQvruftYW90qYU=
  • nginx-mod-http-dav-ext-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Ay2ZtwKnhvi+LVpG7FKSvxejaKE=
  • nginx-mod-http-echo-1.24.0.tuxcare.els3-r0.apk
    sha:Q11MgQ8soTL8fUGQvv+xaPgXOI5y8=
  • nginx-mod-http-echo-1.24.0.tuxcare.els3-r0.apk
    sha:Q1B7AC54VLevz1hEgIYGXOKID0i2o=
  • nginx-mod-http-encrypted-session-1.24.0.tuxcare.els3-r0.apk
    sha:Q1BoLOnJhvemqeGC4EeC5RTUYwekM=
  • nginx-mod-http-encrypted-session-1.24.0.tuxcare.els3-r0.apk
    sha:Q1+SWtc8MQ4xw4Foumx01tJg3pZu8=
  • nginx-mod-http-fancyindex-1.24.0.tuxcare.els3-r0.apk
    sha:Q1q6AhwelRDVyrckWsETYz7WbJef8=
  • nginx-mod-http-fancyindex-1.24.0.tuxcare.els3-r0.apk
    sha:Q1B0XKerBnbhRoL9h8YTtIw7SZto4=
  • nginx-mod-http-geoip-1.24.0.tuxcare.els3-r0.apk
    sha:Q1qXJOrUvW6KiuG9KrvPChXGn/y2Y=
  • nginx-mod-http-geoip-1.24.0.tuxcare.els3-r0.apk
    sha:Q1zIysliIFHenOIQtjA4kQWKn3d/o=
  • nginx-mod-http-geoip2-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Rz75v+R3ngae9Ouh4f1A4bupyHQ=
  • nginx-mod-http-geoip2-1.24.0.tuxcare.els3-r0.apk
    sha:Q1TSX4+a7xgrsWuM8uAtydxzmMJdU=
  • nginx-mod-http-headers-more-1.24.0.tuxcare.els3-r0.apk
    sha:Q1CmV4/Vxd1QcGNOLR9lxNrnyRE2A=
  • nginx-mod-http-headers-more-1.24.0.tuxcare.els3-r0.apk
    sha:Q1/IGpADs2FHGaRkJaFAKC5aZYIs0=
  • nginx-mod-http-image-filter-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Wb+T4LLbZc2V172jnF/UwGq3HaI=
  • nginx-mod-http-image-filter-1.24.0.tuxcare.els3-r0.apk
    sha:Q1XBW/SBcg1hGluBGrw3qR8R/UKsw=
  • nginx-mod-http-js-1.24.0.tuxcare.els3-r0.apk
    sha:Q1LXXtTrHs6jgGfEhJ/rayOuY0EfY=
  • nginx-mod-http-js-1.24.0.tuxcare.els3-r0.apk
    sha:Q1xMM0SnpZo6o2aCu3QLCS8Agsuvo=
  • nginx-mod-http-keyval-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Issfb/VAzTgDh713RhuQM+jq7io=
  • nginx-mod-http-keyval-1.24.0.tuxcare.els3-r0.apk
    sha:Q1jNnMHP9647HasIKhF8UbhEFKSJA=
  • nginx-mod-http-log-zmq-1.24.0.tuxcare.els3-r0.apk
    sha:Q12H2m6fqokxIkzbQGaOtTF7AJhZc=
  • nginx-mod-http-log-zmq-1.24.0.tuxcare.els3-r0.apk
    sha:Q1X7cFfS41xWC2VaQBFwq5+GXCeTo=
  • nginx-mod-http-lua-1.24.0.tuxcare.els3-r0.apk
    sha:Q1k+brtjIrDwccT3b0qsBkksudsU0=
  • nginx-mod-http-lua-1.24.0.tuxcare.els3-r0.apk
    sha:Q1py5SkrYe0kmb+a/Bu69+kBheO5A=
  • nginx-mod-http-lua-upstream-1.24.0.tuxcare.els3-r0.apk
    sha:Q1cRw+l6iFXthRajvmgz9UZqdoMLw=
  • nginx-mod-http-lua-upstream-1.24.0.tuxcare.els3-r0.apk
    sha:Q1d96jc9otnugtYBZRT9zyP9MA3SY=
  • nginx-mod-http-naxsi-1.24.0.tuxcare.els3-r0.apk
    sha:Q1gCEIm/oOiawl4BHRs3QrtxqZdFQ=
  • nginx-mod-http-naxsi-1.24.0.tuxcare.els3-r0.apk
    sha:Q1IvrRml4B3/NNNtL9HZi7ChnjfZ8=
  • nginx-mod-http-nchan-1.24.0.tuxcare.els3-r0.apk
    sha:Q1bGf2On7FgLKRyL9O3e1/vH73Hr0=
  • nginx-mod-http-nchan-1.24.0.tuxcare.els3-r0.apk
    sha:Q1zzfHpQcPqB+NNFG4qtZT9V9jwck=
  • nginx-mod-http-perl-1.24.0.tuxcare.els3-r0.apk
    sha:Q1/lY77aokDke8vR9ucSZm2WD93e8=
  • nginx-mod-http-perl-1.24.0.tuxcare.els3-r0.apk
    sha:Q1uMpST9i1YogTAcwiP76vSFO6AGo=
  • nginx-mod-http-redis2-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Cpy42gBvxGocnzFS22W2uX7Fz1I=
  • nginx-mod-http-redis2-1.24.0.tuxcare.els3-r0.apk
    sha:Q1YVXdtuKIS+qax1ATagJ/aXoCU0Y=
  • nginx-mod-http-set-misc-1.24.0.tuxcare.els3-r0.apk
    sha:Q12G91tooPfiocmwdWGH8qg9kfvqY=
  • nginx-mod-http-set-misc-1.24.0.tuxcare.els3-r0.apk
    sha:Q1yAVqzZBZja8ExSBoNoSXCzOrtVo=
  • nginx-mod-http-shibboleth-1.24.0.tuxcare.els3-r0.apk
    sha:Q1OUuvhYZ4abUzO9Rlc8dPoCrr+18=
  • nginx-mod-http-shibboleth-1.24.0.tuxcare.els3-r0.apk
    sha:Q15Cq3jimekDFr2H5yZhLzm+OqP88=
  • nginx-mod-http-untar-1.24.0.tuxcare.els3-r0.apk
    sha:Q12KPyV+pDTgWQoFbLU2Pa0gLtQVs=
  • nginx-mod-http-untar-1.24.0.tuxcare.els3-r0.apk
    sha:Q1puUhuQMzjWLGloNnb+l5gbD0VsY=
  • nginx-mod-http-upload-1.24.0.tuxcare.els3-r0.apk
    sha:Q1uXbl8wRCqw36b+KYmCEc6q887DY=
  • nginx-mod-http-upload-1.24.0.tuxcare.els3-r0.apk
    sha:Q1/XFrNLgWrHWp3Zi+qj45VjKFAd0=
  • nginx-mod-http-upload-progress-1.24.0.tuxcare.els3-r0.apk
    sha:Q10Ea39Vw5+q38TwWbEntlW8N3lWU=
  • nginx-mod-http-upload-progress-1.24.0.tuxcare.els3-r0.apk
    sha:Q1pZoGmgIudAmgZ6Kdc5Ww+BTCSW0=
  • nginx-mod-http-upstream-fair-1.24.0.tuxcare.els3-r0.apk
    sha:Q1qhlLHF+SW+OvTVnq8XDa6U4wGxY=
  • nginx-mod-http-upstream-fair-1.24.0.tuxcare.els3-r0.apk
    sha:Q12RwI6O32/ixruUeze6R5VJAk6Hk=
  • nginx-mod-http-upstream-jdomain-1.24.0.tuxcare.els3-r0.apk
    sha:Q1kerrF61CU4wCWKLyzeLt2U16mqc=
  • nginx-mod-http-upstream-jdomain-1.24.0.tuxcare.els3-r0.apk
    sha:Q1+Gbmk32wx1ebWrkVTJaW51r+cg4=
  • nginx-mod-http-vod-1.24.0.tuxcare.els3-r0.apk
    sha:Q1jnwl0sdhi53IAxGFjLNJq2+XMjY=
  • nginx-mod-http-vod-1.24.0.tuxcare.els3-r0.apk
    sha:Q13xMAYMJcjv4EF8WGj3U8NLJ7eYc=
  • nginx-mod-http-vts-1.24.0.tuxcare.els3-r0.apk
    sha:Q16u7wjoRF9EQcqkFh9AX2ishDEVg=
  • nginx-mod-http-vts-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Vh02Y5eLBKsnx0Q0eIZnrARISQo=
  • nginx-mod-http-xslt-filter-1.24.0.tuxcare.els3-r0.apk
    sha:Q1f7o6/kTs3vbSkicQGTndmXiwRDA=
  • nginx-mod-http-xslt-filter-1.24.0.tuxcare.els3-r0.apk
    sha:Q1Ha3UC9YimJ4IMTKVjeHoRmlSA50=
  • nginx-mod-http-zip-1.24.0.tuxcare.els3-r0.apk
    sha:Q1shB7+gg7tYlvFBHdX9I//NSfHqw=
  • nginx-mod-http-zip-1.24.0.tuxcare.els3-r0.apk
    sha:Q1d3ILZ6IbIwVQiXOtEiciakWEHo4=
  • nginx-mod-mail-1.24.0.tuxcare.els3-r0.apk
    sha:Q1ngoi1dhotRJlUESjmyBkgOii9lI=
  • nginx-mod-mail-1.24.0.tuxcare.els3-r0.apk
    sha:Q1tIFTfR0/AzbEBebhWTK6QdzFWZQ=
  • nginx-mod-rtmp-1.24.0.tuxcare.els3-r0.apk
    sha:Q1uUj9jP3uFvXkoxOCD+2DcrUChrQ=
  • nginx-mod-rtmp-1.24.0.tuxcare.els3-r0.apk
    sha:Q1SVerfAf4gO3GqZLwFULnJD5cs1Y=
  • nginx-mod-stream-1.24.0.tuxcare.els3-r0.apk
    sha:Q1QQy0/qsKUjBBFmY01GDHqs3cc8g=
  • nginx-mod-stream-1.24.0.tuxcare.els3-r0.apk
    sha:Q1JW7uybmXG1tgHCkSf1SuX40Cpoo=
  • nginx-mod-stream-geoip-1.24.0.tuxcare.els3-r0.apk
    sha:Q1jjg3OD4GnJlq9Z9PeFR02fgCqGs=
  • nginx-mod-stream-geoip-1.24.0.tuxcare.els3-r0.apk
    sha:Q1zJ/XUThXqRdpBr5Z1J9ob7p8T7c=
  • nginx-mod-stream-geoip2-1.24.0.tuxcare.els3-r0.apk
    sha:Q1DV7/rGy3OROXOAbY2KLkkPObCUE=
  • nginx-mod-stream-geoip2-1.24.0.tuxcare.els3-r0.apk
    sha:Q1u3LkP0vpjWcZtnopjm1G1Q5bE60=
  • nginx-mod-stream-js-1.24.0.tuxcare.els3-r0.apk
    sha:Q1vmysPNcxZ8ZB4upHoV1k/Ndw5Pg=
  • nginx-mod-stream-js-1.24.0.tuxcare.els3-r0.apk
    sha:Q1x5xtgLZtNqq2ZALW3wJlVKNQHsc=
  • nginx-openrc-1.24.0.tuxcare.els3-r0.apk
    sha:Q1qEg9zAiSSYsHPXwnXEJh2IaEzi4=
  • nginx-openrc-1.24.0.tuxcare.els3-r0.apk
    sha:Q1xXC96QTC5l6idY0uAcKEMZ/vqAE=
  • nginx-vim-1.24.0.tuxcare.els3-r0.apk
    sha:Q1L7IOxeMO2GnTWFUe3xlVXpefezY=
  • nginx-vim-1.24.0.tuxcare.els3-r0.apk
    sha:Q1jSu4j+pFZ/sKDK+dSm5BI4Yx62o=
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.