openSUSE-SU-2026:20796-1

Description of the patch:

This update for nginx fixes the following issues

• CVE-2026-27651: denial of service via undisclosed requests when the ngx_mail_auth_http_module is enabled (bsc#1260415).
• CVE-2026-32647: NGINX worker memory over-read or over-write via a specially crafted MP4 file (bsc#1260420).
• CVE-2026-40701: heap use-after-free in the worker process when the ssl_verify_client and the ssl_ocsp directives are set due to issue in the ngx_http_ssl_module module (bsc#1265229).
• CVE-2026-42934: heap buffer overread in the worker process due to issue in the ngx_http_charset_module module (bsc#1265231).
• CVE-2026-42945: heap buffer overflow via crafted HTTP requests due to issue in ngx_http_rewrite_module (bsc#1265232).
• CVE-2026-42946: excessive memory allocation and data overread due to issue in the ngx_http_scgi_module and ngx_http_uwsgi_module modules (bsc#1265233).