[Bug 295797] security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 02 Jun 2026 15:58:16 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295797

            Bug ID: 295797
           Summary: security/vuxml: fix nginx ranges vulnerable to
                    CVE-2026-9256
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-secteam@FreeBSD.org
          Reporter: tomas@ciernik.sk
          Assignee: ports-secteam@FreeBSD.org
             Flags: maintainer-feedback?(ports-secteam@FreeBSD.org)

Created attachment 271423
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=271423&action=edit
Corrected nginx ranges vulnerable to CVE-2026-9256

VuXML entry lists nginx-1.30.2_2,3 as vulnerable to CVE-2026-9256, but
https://github.com/nginx/nginx/releases/tag/release-1.30.2 confirms this is
already patched. Proposed fix: replace the current single range with two ranges
matching nginx's official advisory (1.30.2+ and 1.31.1+ fixed).

-- 
You are receiving this mail because:
You are the assignee for the bug.