DEBIANVERIFIED
DSA-6496-2 nginx - regression update
Checked 28 Sep 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
DEBIAN SECURITY ADVISORYDEBIANVERIFIED
PUBLISHER UPDATE · DSA-6496-2
DSA-6496-2 release notes and known issues
DSA-6496-2 nginx - regression update
Scope: Debian. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
The update for nginx released as DSA 6496-1 caused a regression in the nginx-dev package: the backported fix for CVE-2026-42533 declared two private header files, which are not shipped in nginx-dev, as dependencies of the module build, so third-party nginx modules could no longer be built against nginx-dev. Updated nginx packages are now available to correct this issue. https://security-tracker.debian.org/tracker/DSA-6496-2
Improvements and security content
- The update for nginx released as DSA 6496-1 caused a regression in the nginx-dev package: the backported fix for CVE-2026-42533 declared two private header files, which are not shipped in nginx-dev, as dependencies of the module build, so third-party nginx modules could no longer be built against nginx-dev. Updated nginx packages are now available to correct this issue. https://security-tracker.debian.org/tracker/DSA-6496-2
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Debian
Affected versions
- See the official publisher source for applicability.
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Review the official publisher document before deployment.
Related vulnerabilities
BlackTree CVE IntelligenceLifecycle connections
These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.