[From nobody Wed Jun 24 21:37:08 2026
Received: (at submit) by bugs.debian.org; 19 Jun 2026 03:51:13 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-11.0 required=4.0 tests=BAYES_00,FROMDEVELOPER,
 MD5_SHA1_SUM,NO_RELAYS,XMAILER_REPORTBUG autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 16; hammy, 147; neutral, 50; spammy,
 3. spammytokens:0.941-+--H*r:bugs.debian.org, 0.909-+--limited,
 0.879-+--article hammytokens:0.000-+--H*F:U*carnil,
 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug,
 0.000-+--H*Ad:N*Tracking
Return-path: <carnil@debian.org>
Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96)
 (envelope-from <carnil@debian.org>) id 1waQG9-005bYG-1k
 for submit@bugs.debian.org; Fri, 19 Jun 2026 03:51:13 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: Salvatore Bonaccorso <carnil@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: nginx: CVE-2026-48142
Message-ID: <178184107250.2827943.11201789795100808792.reportbug@eldamar.lan>
X-Mailer: reportbug 13.2.0
Date: Fri, 19 Jun 2026 05:51:12 +0200
Delivered-To: submit@bugs.debian.org
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]