[From nobody Sat Jul 4 11:35:10 2026 Received: (at 1140359-close) by bugs.debian.org; 4 Jul 2026 10:32:26 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 104; hammy, 149; neutral, 169; spammy, 1. spammytokens:1.000-3--us1 hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:40718) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxfe-004cnY-0e for 1140359-close@bugs.debian.org; Sat, 04 Jul 2026 10:32:26 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxfe-002gsW-0O for 1140359-close@bugs.debian.org; Sat, 04 Jul 2026 10:32:26 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=PU77JGDQHP8MbtEvfWSezgDeDoHsu9A6s6zo3OFBlUU=; b=WNNFFSgtxHRIwyU87kNV5Yeq30 WA3P5gvok1yupmzEzBPJO49uTLzzqZMkiBj6k+tYczzoySJXqsJ5+GlFpWKebIH1WB0JCfak8fPXV ndyBo7gIE8CNzNYzsgt+YGAl8JAtmZwr3fOC4FiiljIFXC7U14bJI3NjXrVv8pwr2PHFiicNIFyT6 2GWHN5qfMlo8e6W8OUI2g/YvMdHEkU3zDzSfNd+LjxkxZudjoDaET12c5tEJA0NSMV8rfx2GQ2yZp WmXozjsDPo7lvgf5dBbnd6zkCsCSfUXkwq6p3MkmwFIrH1BjQiyfR4snNKxSFnz22W00vbpVfZkaq TOzjydqg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxfd-00000008rQM-0Nb6; Sat, 04 Jul 2026 10:32:25 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Carlos Henrique Lima Melara <charlesmelara@riseup.net> To: 1140359-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: nginx Debian: DAK Debian-Changes: nginx_1.22.1-9+deb12u9_source.changes Debian-Source: nginx Debian-Version: 1.22.1-9+deb12u9 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1140359: fixed in nginx 1.22.1-9+deb12u9 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2753085489536705005==" Message-Id: <E1wfxfd-00000008rQM-0Nb6@fasolo.debian.org> Date: Sat, 04 Jul 2026 10:32:25 +0000 X-CrossAssassin-Score: 2 --===============2753085489536705005== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: nginx Source-Version: 1.22.1-9+deb12u9 Done: Carlos Henrique Lima Melara <charlesmelara@riseup.net> We believe that the bug you reported is fixed in the latest version of nginx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1140359@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Carlos Henrique Lima Melara <charlesmelara@riseup.net> (supplier of updated n= ginx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Jun 2026 22:05:01 -0300 Source: nginx Architecture: source Version: 1.22.1-9+deb12u9 Distribution: bookworm-security Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debi= an.net> Changed-By: Carlos Henrique Lima Melara <charlesmelara@riseup.net> Closes: 1140359 1140361 Changes: nginx (1.22.1-9+deb12u9) bookworm-security; urgency=3Dmedium . * Non-maintainer upload by the LTS Team. * debian/gbp.conf: set debian-branch to debian/bookworm. * debian/patches: import upstream patches to fix vulnerabilities. - CVE-2026-42055.patch: backport from upstream; (Closes: #1140359) - CVE-2026-48142.patch: cherry-pick from upstream. (Closes: #1140361) * debian/tests/abicheck: cherry-pick from debain/trixie, remove chown, add warn when it fails and remove needs-root restriction. Checksums-Sha1: d3f4e6721c4f3a852fa0a604bc75900dfe87d408 3594 nginx_1.22.1-9+deb12u9.dsc 45a89797f7c789287c7f663811efbbd19e84f154 1073948 nginx_1.22.1.orig.tar.gz 7f9c8b261edecb645f4c0a835f7422f2486cee42 86524 nginx_1.22.1-9+deb12u9.debian= .tar.xz e82648b4b875593d65570b2d01d50baed342e986 6049 nginx_1.22.1-9+deb12u9_source.= buildinfo Checksums-Sha256: 28baa4abda06503ae8ecde6e9f049905de7c172d6ec767636628bfcd87499cf4 3594 nginx_= 1.22.1-9+deb12u9.dsc 9ebb333a9e82b952acd3e2b4aeb1d4ff6406f72491bab6cd9fe69f0dea737f31 1073948 ngi= nx_1.22.1.orig.tar.gz 3aebca44037e31b4148cec5a10dc673fdac176411aaa65a0094135895d154223 86524 nginx= _1.22.1-9+deb12u9.debian.tar.xz 7552e7d6aa39cdd6d5d4dfec8533d3670a50330ec1b6a18f23b26e7ee41915cf 6049 nginx_= 1.22.1-9+deb12u9_source.buildinfo Files: ef6570185853d8af66df580ff40760d5 3594 httpd optional nginx_1.22.1-9+deb12u9.= dsc 8296d957561aeed0261d9be4d3decaec 1073948 httpd optional nginx_1.22.1.orig.ta= r.gz 4b5846cc93e3081f11259b9dfa3aa12e 86524 httpd optional nginx_1.22.1-9+deb12u9= .debian.tar.xz 7f5d9ff00943baf3ad0e17930d7ec008 6049 httpd optional nginx_1.22.1-9+deb12u9_= source.buildinfo -----BEGIN PGP SIGNATURE----- iQJNBAEBCgA3FiEECgzx8d8+AINglLHJt4M9ggJ8mQsFAmpH5z4ZHGNoYXJsZXNt ZWxhcmFAcmlzZXVwLm5ldAAKCRC3gz2CAnyZC61iD/kB74h3E0bZ35vjjuLI5LmI /FYTJlAJoRaUBvHi7tPKWLIm82/pGX6nB4wJ6/vUgiByCtYIHCLsch1cjLl05nt2 F0Ye2RCGng5DqoFTkGcWhKFHvrstZ4it+Rxb8vAOPYtxw4luLhUqW6VEMuzdicS0 +7lVDCRbE+wF6P5xAup7NO6wNlkJkTwOaTZHmF/wPzmuYj8oTsBACr2be1RdMMVo PIGqXuj31qMLviEn0dnmnlgYng7W9UHEI6KaJfHepr+UAjpIwEhg7qxAT7lqqJCo hOMrEudmoLUcUHj8/HtMZHYHWoP5HNVQj4RqmXf6a/X8hIjRcv44qYh1cqEaSysJ 6+gDJW19l8W45t8RJGv+7d93dp/wFvPpw+rEQsTx+YORntTMrmTj5VXBiyZe84wq HxiTUyWi+ZP1t549MENZfuvAvwmvDGshkFu5e6QM7KGFiifXZf7SKRr0+GBdMWTO PaFAUmOIdVd/mhrFEXzA8xL/HLaiOwwRRTbKJHiklnq03K+z+2kj2FtAYr+1fg8N SCBc5L6STPLh9D1Ro9ByW7Eq+3r+Hlh2PLxZ8D+uS1+YVBnkvdFb1Z+lbv85fjsV W0oPEmBft70zJDm5UkSkOcRclNX3nDx+VUUSMjow97mQfsCk44Z/mjqErHxdoEek UeFMtuJq+99V8Y+bPu6pVQ=3D=3D =3DdPEl -----END PGP SIGNATURE----- --===============2753085489536705005== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakjhOQAKCRCb9qggYcy5 IeDKAQCrK5DSJt6oaYwGpWRhyX6dSeyR2pI7zyUs+kyzM/MX0AEAlXMEI21qIxiB XvnGpht9EK8joFZb8o+yIU8G7sddkQ0= =5FqT -----END PGP SIGNATURE----- --===============2753085489536705005==-- ]