[Bug 295797] security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 02 Jun 2026 15:58:16 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295797
Bug ID: 295797
Summary: security/vuxml: fix nginx ranges vulnerable to
CVE-2026-9256
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Many People
Priority: ---
Component: Individual Port(s)
Assignee: ports-secteam@FreeBSD.org
Reporter: tomas@ciernik.sk
Assignee: ports-secteam@FreeBSD.org
Flags: maintainer-feedback?(ports-secteam@FreeBSD.org)
Created attachment 271423
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=271423&action=edit
Corrected nginx ranges vulnerable to CVE-2026-9256
VuXML entry lists nginx-1.30.2_2,3 as vulnerable to CVE-2026-9256, but
https://github.com/nginx/nginx/releases/tag/release-1.30.2 confirms this is
already patched. Proposed fix: replace the current single range with two ranges
matching nginx's official advisory (1.30.2+ and 1.31.1+ fixed).
--
You are receiving this mail because:
You are the assignee for the bug.