-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6496-2 [email protected] https://www.debian.org/security/ Aron Xu September 16, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : nginx Debian Bug : 1147527 The update for nginx released as DSA 6496-1 caused a regression in the nginx-dev package: the backported fix for CVE-2026-42533 declared two private header files, which are not shipped in nginx-dev, as dependencies of the module build, so third-party nginx modules could no longer be built against nginx-dev. Updated nginx packages are now available to correct this issue. For the stable distribution (trixie), this problem has been fixed in version 1.26.3-3+deb13u9. We recommend that you upgrade your nginx packages. For the detailed security status of nginx please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nginx Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmqqQcMACgkQ+GQ1dHE8 m66gOgf9GVoDryQKmdgwa4l6VeMbm7bzEj2ZVEr51AHi4KZMYdV/k6v2STxAxoFL g5hFrRQnecLjMjUI3Ur7x7/c7fNcbZyxRZi0BLy+DwUONCoNkqN8Epw9QH/kOBNL 4nU43ps9AH62Si8loUzwEoOCcj9rM5KEd26vFKms4QZ1X0MyTGQotBPjVGU2Cq7U zS4hc+OUiepX+V9l3pWf4RquBcXhiylgZAWcXcRgWERAWfvshAowVICYtuBzncg9 od7xiOhoSbXD9ORtBFRKz6DNyUHuUTVZMibeZCfMgbCtXp60RHaefCyJGgALg/bG JEphkUJOB59VXZIFzZptpuoSgDoUlQ== =xqv4 -----END PGP SIGNATURE-----
