[From nobody Sat Jul 4 11:05:10 2026 Received: (at 1140359-close) by bugs.debian.org; 4 Jul 2026 10:02:53 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 89; hammy, 150; neutral, 152; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:44054) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxD3-004XMj-0o for 1140359-close@bugs.debian.org; Sat, 04 Jul 2026 10:02:53 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxD1-002H5f-3B for 1140359-close@bugs.debian.org; Sat, 04 Jul 2026 10:02:51 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=D5Z+5+rsEp1jdOxS9z+YMgmXBLuKBv+tFHxfXK4Xasc=; b=qYX2Getj2lQRZ9p6Iwk6NJksC+ VOpZQuobEqKYB/9VS27Cjz4aUi7YvEkLpf4G0vEaW8RWIxIDOuCtC/IemvRe8hCcW2eo+D5X261y9 D7dFdXh2Fr2yjXlzpPcrNhiuZQJGejqQlpQo92msQpDIl1QRVrjRd5RhPxQ2RwVUecP/7SIE172We yUHmhfUiAwLQzEiW9oIjxaz5F2e87txFyb+e7/9WBZTDoeYlQij81ur4HifI6KgEPgWLjfUtwOsvp c9ARlDBL+cOIMSIBYdD3jlcZ8c9UG/FrgS0WEDdMD4Cj0dKDHAs5sLojfusoSeQElBJx0LCXcGO6J nePJft6w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxD1-00000008mKG-0JL3; Sat, 04 Jul 2026 10:02:51 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1140359-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: nginx Debian: DAK Debian-Changes: nginx_1.26.3-3+deb13u7_source.changes Debian-Source: nginx Debian-Version: 1.26.3-3+deb13u7 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1140359: fixed in nginx 1.26.3-3+deb13u7 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8482339497511640084==" Message-Id: <E1wfxD1-00000008mKG-0JL3@fasolo.debian.org> Date: Sat, 04 Jul 2026 10:02:51 +0000 --===============8482339497511640084== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: nginx Source-Version: 1.26.3-3+deb13u7 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of nginx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1140359@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated nginx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Jun 2026 22:33:06 +0200 Source: nginx Architecture: source Version: 1.26.3-3+deb13u7 Distribution: trixie-security Urgency: high Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debi= an.net> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1140359 1140361 Changes: nginx (1.26.3-3+deb13u7) trixie-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * Upstream: limit header length for HTTP/2 and gRPC (CVE-2026-42055) (Closes: #1140359) * Charset: fixed another rare buffer overread in recode_from_utf8() (CVE-2026-48142) (Closes: #1140361) Checksums-Sha1: 88d2932f85883790729500395b595ee754c342b3 3953 nginx_1.26.3-3+deb13u7.dsc 3d91dada31ac9fee539f1ddfbef14084319df5cb 92748 nginx_1.26.3-3+deb13u7.debian= .tar.xz f449aab4057bbf1e25e24370f37c0dcc26febf77 6308 nginx_1.26.3-3+deb13u7_source.= buildinfo Checksums-Sha256: 12ea342366d81030e59e3a0ac9591ca549f5da023d85055f0a25d99e68378381 3953 nginx_= 1.26.3-3+deb13u7.dsc 19fcf637728c01356f4c80909812b32bc38d6f10eabc1e7fa2bb2c6fbcf27474 92748 nginx= _1.26.3-3+deb13u7.debian.tar.xz e99e0c54070ead7a45891e72c02da52622aa924b546c8f51d3da640a5b390dc1 6308 nginx_= 1.26.3-3+deb13u7_source.buildinfo Files: 6df53f7005030c662573cc9fd5b3b178 3953 httpd optional nginx_1.26.3-3+deb13u7.= dsc 17694b7c9829210f1401ed3471e95d5e 92748 httpd optional nginx_1.26.3-3+deb13u7= .debian.tar.xz 4c57def4cc45df1daa22ac88f04926ec 6308 httpd optional nginx_1.26.3-3+deb13u7_= source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmpBhzxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EbgsP/2Posd1cuhRcPHG6J0ElVbi3VsCY1muG woOR6qR5Ru3DrVujRiGVu0GRAO2k0fwCIRzdVBOaxDzZoi75/1jHLJ3CByd19JKq 2mZ+qzrcIfpX2UyuBUfIu+ziRJXIaxMyNNaWXA4AB+owA/6VZjILGcyhHMFD0Jy5 SkAZ09A6Nginxkzixp5Lx+NWSALZvOaQ0UFl7x262E4z3dpCMWSOUu+uiOL45U+Q OOVAf4z7mblLKLM7kaTOAPJBnw3zM4ewhKVtcttct/NHC52NhCz/VrXu1f0gs1PF hWyQV/oj9Gs85t2s9Cf7xA8qvGdsWjwgz5xYqBY5yy5GEEio9klzFWZFtrUh/xWW NsS9+K0SxVwaLRO8a5slNrlDuFQB1UPk8B/um1HHRozoPzVYdNA1ByKW+ldvsve9 KOiE9zXgOq29I9Vdw7e3CQv1SfZquAhRv87CwARaIEz4YBYWFbyjFtnKUVseVKzf OOhS2DOzVSSi70id8+Q0MXJQyesk57WZ7c+feJvpWF2B9Wnn3pMEkh8XsOqz1ZUb 9qduarfjZPhpHS7s4OcC+XzMU0ESAqcLG99WSNyxVfaBw+fdI5FvGham3WEzR6hE B++Bdt6+P/tF5+fP2C7vkrkLwgLns+Zn5rG8B2CTDbgcCoIjUrxcUqAsREPLRIkm p9yMtGeN3vgt =3DBSjN -----END PGP SIGNATURE----- --===============8482339497511640084== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakjaSwAKCRCb9qggYcy5 IeMdAP9vEvJIakSHBRRMB2TawVefP+U45bY6b+cnIp2PRxHkZQEAueErz4fOUVH+ BLhgEfJd2+32ycopcA5hgPJhxlb6nw0= =RkNF -----END PGP SIGNATURE----- --===============8482339497511640084==-- ]