[Git][security-tracker-team/security-tracker][master] Add entry fo DLA-4667-1/nginx

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
863142a6 by Salvatore Bonaccorso at 2026-07-04T11:11:06+02:00
Add entry fo DLA-4667-1/nginx

- - - - -


2 changed files:

- data/CVE/list
- data/DLA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12044,7 +12044,7 @@ CVE-2026-48818 (Starlette is a lightweight ASGI framework/toolkit. In versions 1
 CVE-2026-48591 (Improper Neutralization of Script in Attributes in a Web Page vulnerab ...)
 	NOT-FOR-US: pragdave earmark
 CVE-2026-48142 (NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ ...)
-	{DSA-6374-1 DLA-4660-1}
+	{DSA-6374-1 DLA-4667-1 DLA-4660-1}
 	- nginx 1.30.1-5 (bug #1140361)
 	NOTE: https://my.f5.com/manage/s/article/K000161585
 	NOTE: https://github.com/nginx/nginx/commit/319a0bff157b15d9061f4712b2edbe6fdd2dee66 (release-1.31.2)
@@ -12070,7 +12070,7 @@ CVE-2026-42380 (Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.
 CVE-2026-42357 (Incorrect Authorization vulnerability allows users to access workflow  ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-42055 (NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ ...)
-	{DSA-6374-1 DLA-4660-1}
+	{DSA-6374-1 DLA-4667-1 DLA-4660-1}
 	- nginx 1.30.1-5 (bug #1140359)
 	NOTE: https://my.f5.com/manage/s/article/K000161584
 	NOTE: https://github.com/nginx/nginx/commit/58a7bc3406ac8b9dc0e0afafc69ba42df56009e3 (master)


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[03 Jul 2026] DLA-4667-1 nginx - security update
+	{CVE-2026-42055 CVE-2026-48142}
+	[bookworm] - nginx 1.22.1-9+deb12u9
 [04 Jul 2026] DLA-4666-1 openvpn - security update
 	{CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117 CVE-2026-13122 CVE-2026-13698}
 	[bookworm] - openvpn 2.6.14-0+deb12u2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/863142a69ff262a826e3626e07635ad280caca30

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/863142a69ff262a826e3626e07635ad280caca30
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260704/e9291d68/attachment.htm>