CLSA-2026-1790262589

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790262589
Upstream
Published
2026-09-24T15:09:59Z
Modified
2026-10-26T09:32:02Z
Summary
Fix CVE(s): CVE-2026-49975
Details
  • SECURITY UPDATE: memory exhaustion via an excessive number of request headers
    • debian/patches/CVE-2026-49975.patch: add the max_headers directive limiting the number of request header lines accepted per request (default 1000) for HTTP/1 and HTTP/2
    • CVE-2026-49975
References

Affected packages

TuxCare:Ubuntu:16.04
nginx

Package

Name
nginx
Purl
pkg:deb/tuxcare/nginx?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els11

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json"
nginx-common

Package

Name
nginx-common
Purl
pkg:deb/tuxcare/nginx-common?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els11

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json"
nginx-core

Package

Name
nginx-core
Purl
pkg:deb/tuxcare/nginx-core?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els11

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json"
nginx-doc

Package

Name
nginx-doc
Purl
pkg:deb/tuxcare/nginx-doc?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els11

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json"
nginx-extras

Package

Name
nginx-extras
Purl
pkg:deb/tuxcare/nginx-extras?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els11

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json"
nginx-full

Package

Name
nginx-full
Purl
pkg:deb/tuxcare/nginx-full?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els11

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json"
nginx-light

Package

Name
nginx-light
Purl
pkg:deb/tuxcare/nginx-light?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els11

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790262589.json"