gpp_maybe Security update for nginx

SUSE-SLE-Module-Server-Applications-15-SP7-2026-3329

This update for nginx fixes the following issues - CVE-2026-42055: heap-based buffer overflow in the `ngx_http_proxy_v2_module` and `ngx_http_grpc_module` modules (bsc#1268492). - CVE-2026-48142: heap buffer over-read in the `ngx_http_charset_module` module (bsc#1268495). - Remote denial of service via the HTTP/2 bomb exploit (bsc#1267525).

• Release Date
  Jul 28 2026
• References
  Bugzilla: 1267525, 1268492, 1268495
  CVEs: CVE-2026-42055, CVE-2026-48142
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 aarch64

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.24.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.24.1 lock rpm

Server Applications Module 15.7 s390x

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.24.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.24.1 lock rpm

Server Applications Module 15.7 ppc64le

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.24.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.24.1 lock rpm

Server Applications Module 15.7 x86_64

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.21.5-150600.10.24.1 lock rpm lock src

  nginx-source
  The nginx source

  1.21.5-150600.10.24.1 lock rpm