[From nobody Fri Jun 12 19:15:08 2026 Received: (at submit) by bugs.debian.org; 20 May 2025 07:43:47 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02 (2021-04-09) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-15.0 required=4.0 tests=BAYES_00, BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU, DKIM_VALID_EF,HAS_PACKAGE,RCVD_IN_DNSWL_LOW, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED, SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 45; hammy, 95; neutral, 28; spammy, 0. spammytokens: hammytokens:0.000-+--bookworm, 0.000-+--nginx, 0.000-+--UD:patch, 0.000-+--sk:salsa.d, 0.000-+--sk:salsad Return-path: <timon.degroot@hypernode.com> Received: from outbound1.mail.transip.nl ([149.210.149.72]:44708) by buxtehude.debian.org with esmtps (TLS1.2:ECDHE_X25519__RSA_SHA512__AES_256_GCM:256) (Exim 4.94.2) (envelope-from <timon.degroot@hypernode.com>) id 1uHHdY-0033w6-Ay for submit@bugs.debian.org; Tue, 20 May 2025 07:43:47 +0000 Received: from submission0.mail.transip.nl (unknown [10.100.4.69]) by outbound1.mail.transip.nl (Postfix) with ESMTP id 4b1mcL4TQKzRjQk for <submit@bugs.debian.org>; Tue, 20 May 2025 09:37:54 +0200 (CEST) Received: from exchange.transipgroup.nl (unknown [81.4.116.215]) by submission0.mail.transip.nl (Postfix) with ESMTPSA id 4b1mcL3343z2q3rLn for <submit@bugs.debian.org>; Tue, 20 May 2025 09:37:54 +0200 (CEST) Received: from [192.168.1.59] (81.4.116.242) by VM16339.groupdir.nl (10.131.120.73) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11; Tue, 20 May 2025 09:37:53 +0200 Message-ID: <2be44011-8792-4b9d-9c4a-2e32062e8469@hypernode.com> Date: Tue, 20 May 2025 09:37:53 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: <submit@bugs.debian.org> From: Timon de Groot <timon.degroot@hypernode.com> Subject: Missing nginx deb12u2 patch in salsa bookworm Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: 7bit X-Originating-IP: [81.4.116.242] X-ClientProxiedBy: VM16171.groupdir.nl (10.131.120.71) To VM16339.groupdir.nl (10.131.120.73) X-Scanned-By: ClueGetter at submission0.mail.transip.nl DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=transip-a; d=hypernode.com; t=1747726674; h=from:subject:to:date: mime-version:content-type; bh=Cm09v7Bj1AzsOVfKepf0qFKMDgoNmyLvR79XMJHc2k4=; b=bnsaaUdGE1/WMTZPfY96mxHu/EKi7zf9EHLwG4CwhlWrmaNVrxipDZ+NoaAt7lkZDYoIzo P1siMV1KRaVpMU5iaMvZLo/BqudZ8Gb94hgH7PmVVBVQNNUhGFPJ9Mop2mH3Fckg2kJpuJ 2xwRIb7Nrnk/w2PgU0UUq4Rcs+8zWHcnNeTJWvPyfhGEeGk3cU/fsbSfitddnxrBt5Cyo4 fcpeatDpxEddarLZsL+KyoKzlNadZluDTzvWo1+rny4KcD5RMwDUNzAAtLVP1nSl4IF42d e+J5Vtw+zsIl5scLwZqECc8DXGF9yYIHVQYYsnsc4gvXhDATszadN1nUFJfTEg== X-Report-Abuse-To: abuse@transip.nl X-Greylist: delayed 341 seconds by postgrey-1.36 at buxtehude; Tue, 20 May 2025 07:43:44 UTC Delivered-To: submit@bugs.debian.org Package: nginx Version: 1.22.1-9+deb12u2 The recently uploaded patches[1] for CVE-2024-7347 (CVE-2024-7347-1.patch and CVE-2024-7347-2.patch) have not been uploaded to the nginx bookworm branch hosted at debian salsa[2]. The patch cannot be found in the debian/bookworm branch, neither as a tag debian/1.22.1-9+deb12u2. What's the policy for this? And will these patches be uploaded to the git repository at some point? [1] https://sources.debian.org/src/nginx/1.22.1-9%2Bdeb12u2/debian/changelog/ [2] https://salsa.debian.org/nginx-team/nginx ]