Debian alert DLA-4634-1 (nginx)

From:
             
 
Carlos Henrique Lima Melara <charles@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4634-1] nginx security update
Date:
             
 
Thu, 18 Jun 2026 00:00:12 -0300
Message-ID:
             
 
<ajNfJZqP2QVen4UD@fw13.lan>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4634-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/          Carlos Henrique Lima Melara
June 17, 2026                                 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : nginx
Version        : 1.18.0-6.1+deb11u7
CVE ID         : CVE-2026-9256
Debian Bug     : 1137339


A vulnerability was discoverd in Nginx, a high-performance web and reverse
proxy server, which could result in remote code execution and denial of
service.

For Debian 11 bullseye, this problem has been fixed in version
1.18.0-6.1+deb11u7.

We recommend that you upgrade your nginx packages.

For the detailed security status of nginx please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/nginx

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=onbV
-----END PGP SIGNATURE-----