[From nobody Thu May 21 13:51:07 2026 Received: (at submit) by bugs.debian.org; 21 May 2026 04:18:13 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-9.9 required=4.0 tests=BAYES_00, FOURLA, FROMDEVELOPER, NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 24; hammy, 148; neutral, 49; spammy, 2. spammytokens:0.941-+--H*r:bugs.debian.org, 0.879-+--article hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*M:valinor, 0.000-+--HTo:N*Debian Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1wPurN-00C1IP-2H for submit@bugs.debian.org; Thu, 21 May 2026 04:18:13 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: libnginx-mod-js: CVE-2026-8711 Message-ID: <177933709279.1440983.13228406693726291553.reportbug@elende.valinor.li> X-Mailer: reportbug 13.2.0 Date: Thu, 21 May 2026 06:18:12 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiBsaWJuZ2lueC1tb2QtanMKVmVyc2lvbjogMC45LjgtMQpTZXZlcml0eTogaW1wb3J0 YW50ClRhZ3M6IHNlY3VyaXR5IHVwc3RyZWFtClgtRGViYnVncy1DYzogY2FybmlsQGRlYmlhbi5v cmcsIERlYmlhbiBTZWN1cml0eSBUZWFtIDx0ZWFtQHNlY3VyaXR5LmRlYmlhbi5vcmc+CgpIaSwK ClRoZSBmb2xsb3dpbmcgdnVsbmVyYWJpbGl0eSB3YXMgcHVibGlzaGVkIGZvciBsaWJuZ2lueC1t b2QtanMuCgpDVkUtMjAyNi04NzExWzBdOgp8IE5HSU5YIEphdmFTY3JpcHQgaGFzIGEgdnVsbmVy YWJpbGl0eSB3aGVuIHRoZQp8IGpzX2ZldGNoX3Byb3h5wqBkaXJlY3RpdmUgaXMgY29uZmlndXJl ZCB3aXRoIGF0IGxlYXN0IG9uZSBjbGllbnQtCnwgY29udHJvbGxlZCBOR0lOWCB2YXJpYWJsZSAo Zm9yIGV4YW1wbGUsICRodHRwXyosICRhcmdfKiwgJGNvb2tpZV8qKQp8IGFuZCBhIGxvY2F0aW9u IGludm9raW5nIHRoZSBuZ3guZmV0Y2goKSBvcGVyYXRpb24gZnJvbSBOR0lOWAp8IEphdmFTY3Jp cHQuIEFuIHVuYXV0aGVudGljYXRlZCBhdHRhY2tlciBjYW4gZXhwbG9pdCB0aGlzCnwgdnVsbmVy YWJpbGl0eSBieSBzZW5kaW5nIGNyYWZ0ZWQgSFRUUCByZXF1ZXN0cy4gVGhpcyBtYXkgY2F1c2Ug YQp8IGhlYXAgYnVmZmVyIG92ZXJmbG93IGluIHRoZSBOR0lOWCB3b3JrZXIgcHJvY2VzcyBsZWFk aW5nIHRvIGEKfCByZXN0YXJ0LiBBZGRpdGlvbmFsbHksIGZvciBzeXN0ZW1zIHdpdGggQWRkcmVz cyBTcGFjZSBMYXlvdXQKfCBSYW5kb21pemF0aW9uIChBU0xSKSBkaXNhYmxlZCwgY29kZSBleGVj dXRpb24gaXMgcG9zc2libGUuICAgIE5vdGU6CnwgU29mdHdhcmUgdmVyc2lvbnMgd2hpY2ggaGF2 ZSByZWFjaGVkIEVuZCBvZiBUZWNobmljYWwgU3VwcG9ydCAoRW9UUykKfCBhcmUgbm90IGV2YWx1 YXRlZC4KCgpJZiB5b3UgZml4IHRoZSB2dWxuZXJhYmlsaXR5IHBsZWFzZSBhbHNvIG1ha2Ugc3Vy ZSB0byBpbmNsdWRlIHRoZQpDVkUgKENvbW1vbiBWdWxuZXJhYmlsaXRpZXMgJiBFeHBvc3VyZXMp IGlkIGluIHlvdXIgY2hhbmdlbG9nIGVudHJ5LgoKRm9yIGZ1cnRoZXIgaW5mb3JtYXRpb24gc2Vl OgoKWzBdIGh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNrZXIvQ1ZFLTIw MjYtODcxMQogICAgaHR0cHM6Ly93d3cuY3ZlLm9yZy9DVkVSZWNvcmQ/aWQ9Q1ZFLTIwMjYtODcx MQpbMV0gaHR0cHM6Ly9teS5mNS5jb20vbWFuYWdlL3MvYXJ0aWNsZS9LMDAwMTYxMzA3CgpQbGVh c2UgYWRqdXN0IHRoZSBhZmZlY3RlZCB2ZXJzaW9ucyBpbiB0aGUgQlRTIGFzIG5lZWRlZC4KClJl Z2FyZHMsClNhbHZhdG9yZQo= ]