[Pkg-nginx-maintainers] Bug#1095403: Bug#1095403: ngix: CVE-2025-23419

[Jérémy Lal]

Le ven. 7 févr. 2025 à 13:30, Salvatore Bonaccorso <carnil at debian.org> a
écrit :

> Source: nginx
> Version: 1.26.0-3
> Severity: important
> Tags: security upstream
> X-Debbugs-Cc: carnil at debian.org, Debian Security Team <
> team at security.debian.org>
> Control: found -1 1.22.1-9
>
> Hi,
>
> The following vulnerability was published for nginx.
>
> CVE-2025-23419[0]:
> [2]
> https://github.com/nginx/nginx/commit/13935cf9fdc3c8d8278c70716417d3b71c36140e


Fixed in 1.26.3-2 which I uploaded to unstable minutes ago :(
I don't know what to do in this case.

Jérémy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/attachments/20250207/302c1136/attachment.htm>