[From nobody Sat May 23 08:09:06 2026 Received: (at 1137339-close) by bugs.debian.org; 23 May 2026 07:07:31 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, GMAIL,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 99; hammy, 150; neutral, 140; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:51190) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQgSJ-00HXuL-0W for 1137339-close@bugs.debian.org; Sat, 23 May 2026 07:07:31 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQgSH-007Erw-2q for 1137339-close@bugs.debian.org; Sat, 23 May 2026 07:07:29 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=pVpeB5Vt2Ty9NlqEbqFV3iRfaBAzvQ9bpukx5LZo7f8=; b=CCx+uKHIrm0pKKDwWkpOQaBOIj AKesBkxj3ByzjqHLs3UsRsFzgUTwDyvqyEOEVEeOfr0IWbAPzJD0ALK9s/cnp/YZneJSDParkm2r/ kHIZpkA84fQARrU23EKvYTgjFTS5zJ1mFFCqaVvCPzA9+/CS4t+eGQ7M3Ha6TndK1dSOGb7AJa2rk pbk5OwK7DQLPqLyISODvRZzA5y7DhmeDxQcI92vzAEEh35nSaRyU4o84ZGkTeX+RRP9bI1uclJyp7 fcFgmndwV87uwBoeP7jRTvY2Q5u3po3561h0ozl6LCvLCFl1zHXq+KhWjm0ljxz1eF8Eb7EPs/Dop VZo7d8Mw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wQgSG-0000000AO9k-44X9; Sat, 23 May 2026 07:07:28 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?b?SmFuIE1vasW+w63FoQ==?= <janmojzis@debian.org> To: 1137339-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: nginx Debian: DAK Debian-Changes: nginx_1.30.1-3_source.changes Debian-Source: nginx Debian-Version: 1.30.1-3 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137339: fixed in nginx 1.30.1-3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2597668304804498787==" Message-Id: <E1wQgSG-0000000AO9k-44X9@fasolo.debian.org> Date: Sat, 23 May 2026 07:07:28 +0000 --===============2597668304804498787== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: nginx Source-Version: 1.30.1-3 Done: Jan Moj=C5=BE=C3=AD=C5=A1 <janmojzis@debian.org> We believe that the bug you reported is fixed in the latest version of nginx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137339@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jan Moj=C5=BE=C3=AD=C5=A1 <janmojzis@debian.org> (supplier of updated nginx p= ackage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 May 2026 06:23:38 +0000 Source: nginx Architecture: source Version: 1.30.1-3 Distribution: unstable Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debi= an.net> Changed-By: Jan Moj=C5=BE=C3=AD=C5=A1 <janmojzis@debian.org> Closes: 1137339 Changes: nginx (1.30.1-3) unstable; urgency=3Dmedium . * backport fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256) from upstream 1.30.2 nginx. * d/p/CVE-2026-9256.patch add (Closes: 1137339) Checksums-Sha1: 1b7d1fe5dfc33b65fb1e09bea76ab9acfe067bfe 3803 nginx_1.30.1-3.dsc bbaaf21796643b8bc4c6c09cf1033bdc8272af43 75668 nginx_1.30.1-3.debian.tar.xz 04c904cb626ea2d87f3333c1ae936dc680fbd7a4 2365196 nginx_1.30.1-3.git.tar.xz b84361bca698c3d90528eb74450b0ee24ba61a33 17418 nginx_1.30.1-3_source.buildin= fo Checksums-Sha256: a9f302b3d5ae79ef0b792e7e52e1ed9e75dfd73a5f4b3d371ff8095bace7c9e2 3803 nginx_= 1.30.1-3.dsc 7d5486118924e51c519caf866a93df87ea935b95f4e00abec82ed61eb569945e 75668 nginx= _1.30.1-3.debian.tar.xz e0a7d8588c1b6f3c9f000134a87614c4ea7c331912a0ae37bfb1bfb636068fcb 2365196 ngi= nx_1.30.1-3.git.tar.xz 87926e29d4dba1a7d325acf80ba92b8efbee1dab806decb2af080520a43204a5 17418 nginx= _1.30.1-3_source.buildinfo Files: 1930cb6c07bf11ff32aa1f9d54596dc3 3803 httpd optional nginx_1.30.1-3.dsc 8d1114bc4ce3ea879d45cbda4c485f97 75668 httpd optional nginx_1.30.1-3.debian.= tar.xz 06ceee00079e5fca845a1a4d6ffdbc7c 2365196 httpd None nginx_1.30.1-3.git.tar.xz 196d6a784f633e22ee294d35aa7099b4 17418 httpd optional nginx_1.30.1-3_source.= buildinfo Git-Tag-Info: tag=3D89c8f82e5343bc7437103287712cdd9aa430b696 fp=3Dd008b0c23d8= 479e46b9fcb9045da517496939ff9 Git-Tag-Tagger: Jan Moj=C5=BE=C3=AD=C5=A1 <jan.mojzis@gmail.com> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmoRTXoACgkQYG0ITkaD wHnozg/+KJbD0yzWQeGAXqOkIABTNF9ER8nru4cwTj+ubKOBugYomIuL9bJ599Bu gqxU0S6UmuKAJJoagnwwRiq7JSKekqG3jlTiRX793WVeDx6Js+CFi7TII04i6NNt tzcc9yzyXaVjb0dimOTe/n2FzD6CYbzrfN7HFZZezZpGcSgUm1Zb6zUImWS2IBOm /Pv4uhxfTfcJTkOh6/EZuL258ddHnV5XCN6/rvpiu22KNYKzwdIFjiyX+NT7vV/Y MNvRzW6My+D2/8SMBacUdKC/WI2RnL0sdDUZrDNQfGTK+tCw2ynq708zDTru5Z6u EowVBUeewgZpQvox0FjQOeKm7R92qIcITpodVevZsVIiJahFKeWxeFKdawfnPX/y TSA61gR4izne4ARQzUAdmRihKcD+nkAXRO1ADGlNT8EjAAfFPPw6hsn9zNhuXQJz Iquz4cpTUoBvzTkuvVwoHyKhsfLTNQIulIO+0SiAVjGD64hkNlUgTswTKsC8ipOB UxzhdmfHqeZlIhdag6kXlH2/QLZoHVu6BoiT5BLKxkDwPPaUMp1cq4q9mAhHsIp0 ri5JaUyDA+YonMDIKUN8sEXQQznl8jVu25zvld/eSp7wqyimZShmBWHmlKNjXv0t EiA9xpdY7/pWLjutzDceM9vJGca2vuavxvTs47kdZRrg7VrI29Y=3D =3DWzQv -----END PGP SIGNATURE----- --===============2597668304804498787== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahFSMAAKCRCb9qggYcy5 IRWLAQCiB1lvlpbrIBeUbA9Qj72nqJGhGI1bXhQ//G6lCJso/QEA1snKf/sZOvdX YGgXvEvZUSg68h96yySL+ZZnorTF0gY= =OEsf -----END PGP SIGNATURE----- --===============2597668304804498787==-- ]