[Git][security-tracker-team/security-tracker][master] CVE-2026-XXXX/nginx: mark as fixed in bullseye, fixed by DLA-4660-1

[Carlos Henrique Lima Melara (@charles)]

Carlos Henrique Lima Melara pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b6eb8d7f by Carlos Henrique Lima Melara at 2026-08-03T22:01:44-03:00
CVE-2026-XXXX/nginx: mark as fixed in bullseye, fixed by DLA-4660-1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -50136,6 +50136,7 @@ CVE-2026-XXXX [HTTP/2 Bomb denial of service]
 	- nginx 1.30.0-2 (bug #1138794)
 	[trixie] - nginx 1.26.3-3+deb13u6
 	[bookworm] - nginx 1.22.1-9+deb12u8
+	[bullseye] - nginx 1.18.0-6.1+deb11u8
 	NOTE: https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb
 	NOTE: https://github.com/nginx/nginx/commit/365694160a85229a7cb006738de9260d49ff5fa2 (release-1.29.8)
 CVE-2026-49975 (Memory Allocation with Excessive Size Value vulnerability in Apache HT ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6eb8d7ff2ef220fc63505dd9786fc45ca316b4d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6eb8d7ff2ef220fc63505dd9786fc45ca316b4d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260804/38b3f222/attachment.htm>