[From nobody Fri Jun 19 21:57:08 2026 Received: (at 1140359-close) by bugs.debian.org; 19 Jun 2026 20:56:28 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, GMAIL,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 92; hammy, 150; neutral, 174; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:50394) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wagGK-007jCP-0K for 1140359-close@bugs.debian.org; Fri, 19 Jun 2026 20:56:28 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wagGI-004kB5-2Y for 1140359-close@bugs.debian.org; Fri, 19 Jun 2026 20:56:26 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=36yJ/K5o9R7Ssr07/yyde5M0puornv26p2gPaKywSdg=; b=FtiZMlKGQwi741/E400y8ZS/Fm H1hhYcJZRk3CWsYD0j3g5GJInLgv+zT8e33NYT4ccd9Q+qhNnzh2LI4oQo+VcbMeLt3FP0XcgsF++ OVl4MGxJKvS5TXrxs62oSY9jxTGmo/ykIlwwmqwDwGyjJ8WfE6Zz1SzAPpJVkZkITZtYxZi8vmpt7 PUdYq0CMDOQoCmcDWGMvyPkvk1Nqe1lwOSU7LGpOl0hEdVLBqq6aDzn/ALBR1r/KUgnkyAB7O5cNm fhSykMZF4lken54JESZLX0tvasxhmvSgLyrTjwrGu6Va9YvfKi4R4KjTKyHo7eUONko0cdVWPReLI 5EslhUGQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wagGH-0000000EJUV-3cO7; Fri, 19 Jun 2026 20:56:25 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?b?SmFuIE1vasW+w63FoQ==?= <janmojzis@debian.org> To: 1140359-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: nginx Debian: DAK Debian-Changes: nginx_1.30.1-5_source.changes Debian-Source: nginx Debian-Version: 1.30.1-5 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1140359: fixed in nginx 1.30.1-5 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3054848553834252202==" Message-Id: <E1wagGH-0000000EJUV-3cO7@fasolo.debian.org> Date: Fri, 19 Jun 2026 20:56:25 +0000 --===============3054848553834252202== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: nginx Source-Version: 1.30.1-5 Done: Jan Moj=C5=BE=C3=AD=C5=A1 <janmojzis@debian.org> We believe that the bug you reported is fixed in the latest version of nginx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1140359@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jan Moj=C5=BE=C3=AD=C5=A1 <janmojzis@debian.org> (supplier of updated nginx p= ackage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 19 Jun 2026 19:21:49 +0000 Source: nginx Architecture: source Version: 1.30.1-5 Distribution: unstable Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debi= an.net> Changed-By: Jan Moj=C5=BE=C3=AD=C5=A1 <janmojzis@debian.org> Closes: 1140359 Changes: nginx (1.30.1-5) unstable; urgency=3Dmedium . * d/t/ssi-module-test: remove the test associated with the bug report, since the underlying bug has been fixed in bookworm * d/t/RFC9112: create a wrapper for RFC9112 tests, then merge d/t/proxy, d/t/uwsgi-RFC9112, and d/t/fastcgi-RFC9112 into the wrapper to improve test performance. * d/control: bump Standards-Version: 4.7.4, no changes * d/p/CVE-2026-42055.patch add, backport fix for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055) (Closes: 1140359) * d/p/CVE-2026-48142.patch add, backport fix for buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142) Checksums-Sha1: a1ca257b8c7f81a2cb40ee21f0d2a47832b7698d 3803 nginx_1.30.1-5.dsc 2a7faa86248f3422ee9a33652cd748fd5d7f95af 78112 nginx_1.30.1-5.debian.tar.xz 98090886fb54d6f99b73f056b54360e96ea8b451 3113948 nginx_1.30.1-5.git.tar.xz a6dbf86ead95db759a88a35a7baac7321bc8514e 17484 nginx_1.30.1-5_source.buildin= fo Checksums-Sha256: b875ef3cd5261afa2a8b157a3fdc4be81e592252cc4f64c05872c34bf1598d5c 3803 nginx_= 1.30.1-5.dsc a0e2bda21c59182446ee4cfa38b346f858a5fdc04959cb370388ad68f4560000 78112 nginx= _1.30.1-5.debian.tar.xz 39171568c401490ea513e9d49061f0a171445a3538a9ee00f8ab3e53cf54686a 3113948 ngi= nx_1.30.1-5.git.tar.xz 2f19a60a94861de21baca90775e7f238ddfcf21cbd8337783bd8b58c9400eb73 17484 nginx= _1.30.1-5_source.buildinfo Files: 0bedfe152e0dae009c674f7d6184eabe 3803 httpd optional nginx_1.30.1-5.dsc ef2711ca9e9f6faf0289cc46aff983bb 78112 httpd optional nginx_1.30.1-5.debian.= tar.xz 78ca4e88e9aca39ffb241ad52a862991 3113948 httpd None nginx_1.30.1-5.git.tar.xz d6a85730bee17d1ef0bb04c4bf967bef 17484 httpd optional nginx_1.30.1-5_source.= buildinfo Git-Tag-Info: tag=3Ddf47fe26cfc38564dbbead6b0634da24cba7303c fp=3Dd008b0c23d8= 479e46b9fcb9045da517496939ff9 Git-Tag-Tagger: Jan Moj=C5=BE=C3=AD=C5=A1 <jan.mojzis@gmail.com> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmo1odkACgkQYG0ITkaD wHkjWRAAsdAGqR76raUBLMD/Sg+ZJuHOFLwb89JgQ5chM4y9onXYp1fTt0GSoDYc BTZUgC162mU1tXzjAVZA6scxXbr6eW4TLDZiCRpmTyiu8zKjqSkrlKGE8UKmnbmH +q80tNzjuw5U7F/I6/BPH7jo6dfuktxGxWpAIYo01rTobtzI2z+1PY3MxFjU0cfZ 4mTLElyNLJ8YwJCIHtOtNNyGkg7Df6K7ngJMW6pBZQMK4gN429TcrIep3Ym1mf5A RkrSnkXTuOCF6bNUUzqaLap7TAsUD1gv1XfqO33dcdVqFCmoeFPVaV6XR8N22AKe gFkmPDtqFDGcLs/CvmmbRwRfXSShTvxFs6PtAwYtBVgTFJUp2HFo7gGR63rF9Yk/ 21L5actI7VPfysBmt5OJCxKo0U4/nf3PLsOTUgN7AuEuFxjIdUVAm7DcILDHZyWk Kzfw/ob5FD3Xrg6QfPyTM+WILmnyDfE6JZNnwYTLIY8iBl52Tkj1yRUqU1h9vGuo ZMot+PmxBrG2P7KKCJhabZS+9grnUOAAdztn9TI3LdC6s9cquFlZpmi90GqIIAK3 NUhwaRj9WbHFBuWxG589SnMnZPtZGnsoSpLeGtY9ZAOM6G/QbF2FcPV2T9F1DV8E WvLd37Bu13pFWQ2IlrlahfAYrjR+SZPql6dZE9EXvXChB9nBIkc=3D =3Dvfwt -----END PGP SIGNATURE----- --===============3054848553834252202== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajWs+QAKCRCb9qggYcy5 IapqAQC8WA8R8j2TP7GbiWvY5lrrFMem1O0WWMymAYuFo33oVQEA6ZDe9NyrMWRJ GiOyMd/4HouqcAFdnnFB58NgltxebwQ= =4Xh5 -----END PGP SIGNATURE----- --===============3054848553834252202==-- ]