Description of the patch:
This update for nginx fixes the following issues
- CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228).
- CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules (bsc#1268492).
- CVE-2026-48142: heap buffer over-read in the ngx_http_charset_module module (bsc#1268495).
- HTTP2-BOMB denial of service (bsc#1267525).