[ubuntu/questing-proposed] nginx 1.26.3-3ubuntu3 (Accepted)

[Marc Deslauriers]

nginx (1.26.3-3ubuntu3) questing; urgency=medium

  * SECURITY UPDATE: data leak in ngx_mail_smtp_module
    - debian/patches/CVE-2025-53859.patch: properly check lengths in
      src/mail/ngx_mail_handler.c.
    - CVE-2025-53859

Date: Fri, 22 Aug 2025 08:24:37 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/nginx/1.26.3-3ubuntu3
-------------- next part --------------
Format: 1.8
Date: Fri, 22 Aug 2025 08:24:37 -0400
Source: nginx
Built-For-Profiles: noudeb
Architecture: source
Version: 1.26.3-3ubuntu3
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 nginx (1.26.3-3ubuntu3) questing; urgency=medium
 .
   * SECURITY UPDATE: data leak in ngx_mail_smtp_module
     - debian/patches/CVE-2025-53859.patch: properly check lengths in
       src/mail/ngx_mail_handler.c.
     - CVE-2025-53859
Checksums-Sha1:
 982816a1b45bfb473b9cd726e30d2e108e118617 3850 nginx_1.26.3-3ubuntu3.dsc
 8e1bd923113943d6eb6b801859fb6f77e47dafb4 89768 nginx_1.26.3-3ubuntu3.debian.tar.xz
 18afa6fa69c14fda8697fc2ba96b679e35a1cc9e 8745 nginx_1.26.3-3ubuntu3_source.buildinfo
Checksums-Sha256:
 b86946a8853f519249dc1b7b637c766f9ff43ae90fb2dd0c1f29c781e8626e1a 3850 nginx_1.26.3-3ubuntu3.dsc
 dfc1e8bc117e18a81c15967ddbf14fe60b88c0c4ec0d900cb5a29b164a30e8d2 89768 nginx_1.26.3-3ubuntu3.debian.tar.xz
 990b3875942dcb80afaa5f8353f07a86bae14178085bc3e98eb70f4918a6eaa2 8745 nginx_1.26.3-3ubuntu3_source.buildinfo
Files:
 e86c66bf8ec2b4bc81aa2e3910069cde 3850 httpd optional nginx_1.26.3-3ubuntu3.dsc
 28340ea9b8d910bd18a3840342e7c5d5 89768 httpd optional nginx_1.26.3-3ubuntu3.debian.tar.xz
 4d2ce374a4e47fbd7a069186efda77b5 8745 httpd optional nginx_1.26.3-3ubuntu3_source.buildinfo
Original-Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers at alioth-lists.debian.net>