On Thu, Sep 17, 2026 at 01:32:44AM -0300, [email protected] wrote:
> [1] https://debusine.debian.net/debian/developers/artifact/4748793/
Got it, thanks.
My setup doesn't make use of all the packages, but the ones it does use
work fine for me.
I also tested building from source, and that works well too.
That CVS-2026-42533 patch is huge. :-) No wonder this was a lengthy effort.
I don't personally like the two places where it defaults to
the "previous (unchecked) behaviour rather than failing spuriously"
+ if (e->pos < e->buf.data || e->pos > end) {
+ return NGX_OK;
+ }
But my guess is that will only matter if I'm running some custom
plugins, which I'm not. I assume you ran into this during your testing
and needed to make the hard decision.
Thanks to you both for your hard work!
- Chris
