[From nobody Fri Jun 19 21:57:08 2026 Received: (at submit) by bugs.debian.org; 19 Jun 2026 03:40:53 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-10.9 required=4.0 tests=BAYES_00,FOURLA, FROMDEVELOPER,MD5_SHA1_SUM,NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 18; hammy, 149; neutral, 69; spammy, 1. spammytokens:0.941-+--H*r:bugs.debian.org hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1waQ68-005aI8-2M for submit@bugs.debian.org; Fri, 19 Jun 2026 03:40:52 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: nginx: CVE-2026-42055 Message-ID: <178184044981.2822191.9375593529493217986.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0 Date: Fri, 19 Jun 2026 05:40:49 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiBuZ2lueApWZXJzaW9uOiAxLjMwLjEtNApTZXZlcml0eTogZ3JhdmUKVGFnczogc2Vj dXJpdHkgdXBzdHJlYW0KWC1EZWJidWdzLUNjOiBjYXJuaWxAZGViaWFuLm9yZywgRGViaWFuIFNl Y3VyaXR5IFRlYW0gPHRlYW1Ac2VjdXJpdHkuZGViaWFuLm9yZz4KCkhpLAoKVGhlIGZvbGxvd2lu ZyB2dWxuZXJhYmlsaXR5IHdhcyBwdWJsaXNoZWQgZm9yIG5naW54LgoKQ1ZFLTIwMjYtNDIwNTVb MF06CnwgTkdJTlggUGx1cyBhbmQgTkdJTlggT3BlbiBTb3VyY2UgaGF2ZSBhIHZ1bG5lcmFiaWxp dHkgaW4gdGhlCnwgbmd4X2h0dHBfcHJveHlfdjJfbW9kdWxlwqBhbmQgbmd4X2h0dHBfZ3JwY19t b2R1bGXCoG1vZHVsZXMuIFRoaXMKfCB2dWxuZXJhYmlsaXR5IGV4aXN0cyB3aGVuIHRoZSBwcm94 eV9odHRwX3ZlcnNpb24gdG8gMsKgb3IKfCBncnBjX3Bhc3PCoGRpcmVjdGl2ZXMgYXJlIHVzZWQg dG8gcHJveHkgSFRUUC8yIHRyYWZmaWMsIHRoZQp8IGlnbm9yZV9pbnZhbGlkX2hlYWRlcnPCoGRp cmVjdGl2ZSBpcyBzZXQgdG8gb2ZmLCBhbmQgdGhlCnwgbGFyZ2VfY2xpZW50X2hlYWRlcl9idWZm ZXJzwqBkaXJlY3RpdmUgc2l6ZSBpcyBsYXJnZXIgdGhhbiAyCnwgbWVnYWJ5dGVzLiBBIHJlbW90 ZSwgdW5hdXRoZW50aWNhdGVkIGF0dGFja2VyLCBhbG9uZyB3aXRoIGNvbmRpdGlvbnMKfCBiZXlv bmQgdGhlaXIgY29udHJvbCwgY291bGQgc2VuZCBsYXJnZSBoZWFkZXJzIHdoaWxlIGNyZWF0aW5n IGFuCnwgdXBzdHJlYW0gcmVxdWVzdC4gVGhpcyBtYXkgY2F1c2UgYSBoZWFwLWJhc2VkIGJ1ZmZl ciBvdmVyZmxvdyBpbiB0aGUKfCBOR0lOWCB3b3JrZXIgcHJvY2VzcyBsZWFkaW5nIHRvIGEgcmVz dGFydC4gQWRkaXRpb25hbGx5LCBhdHRhY2tlcnMKfCBjYW4gZXhlY3V0ZSBjb2RlIG9uIHN5c3Rl bXMgd2l0aCBBZGRyZXNzIFNwYWNlIExheW91dCBSYW5kb21pemF0aW9uCnwgKEFTTFIpIGRpc2Fi bGVkIG9yIHdoZW4gdGhlIGF0dGFja2VyIGNhbiBieXBhc3MgQVNMUi4gICAgTm90ZToKfCBTb2Z0 d2FyZSB2ZXJzaW9ucyB3aGljaCBoYXZlIHJlYWNoZWQgRW5kIG9mIFRlY2huaWNhbCBTdXBwb3J0 IChFb1RTKQp8IGFyZSBub3QgZXZhbHVhdGVkLgoKCklmIHlvdSBmaXggdGhlIHZ1bG5lcmFiaWxp dHkgcGxlYXNlIGFsc28gbWFrZSBzdXJlIHRvIGluY2x1ZGUgdGhlCkNWRSAoQ29tbW9uIFZ1bG5l cmFiaWxpdGllcyAmIEV4cG9zdXJlcykgaWQgaW4geW91ciBjaGFuZ2Vsb2cgZW50cnkuCgpGb3Ig ZnVydGhlciBpbmZvcm1hdGlvbiBzZWU6CgpbMF0gaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRl Ymlhbi5vcmcvdHJhY2tlci9DVkUtMjAyNi00MjA1NQogICAgaHR0cHM6Ly93d3cuY3ZlLm9yZy9D VkVSZWNvcmQ/aWQ9Q1ZFLTIwMjYtNDIwNTUKWzFdIGh0dHBzOi8vbXkuZjUuY29tL21hbmFnZS9z L2FydGljbGUvSzAwMDE2MTU4NApbMl0gaHR0cHM6Ly9naXRodWIuY29tL25naW54L25naW54L2Nv bW1pdC8xMzFiZTg1MTRkYTg5ODViMTViNzQxNTA1MjFhZmVkYmY5Y2M0ZWEzCgpQbGVhc2UgYWRq dXN0IHRoZSBhZmZlY3RlZCB2ZXJzaW9ucyBpbiB0aGUgQlRTIGFzIG5lZWRlZC4KClJlZ2FyZHMs ClNhbHZhdG9yZQo= ]