#1151708 passenger: warning for security vulnerability

Package:
passenger
Source:
passenger
Description:
web application server
Submitter:
Wim Bertels
Date:
2026-10-23 08:03:02 UTC
Severity:
normal
Tags:
#1151708#5
Date:
2026-10-23 08:01:17 UTC
From:
To:
Dear Maintainer,

cf as these log entries say:

[ E 2026-10-22 00:15:24.9242 20500/T6 age/Cor/SecurityUpdateChecker.h:521 ]: A security update is availa
ble for your version (6.0.26) of Phusion Passenger(R). We strongly recommend upgrading to version 6.2.1.
[ E 2026-10-22 00:15:24.9242 20500/T6 age/Cor/SecurityUpdateChecker.h:526 ]: Additional security update check information:
- [Fixed in 6.2.0] [CVE-2026-42533, CVE-2026-60005, CVE-2026-56434, CVE number pending] Various vulnerabilities in Nginx addressed by bumping Passenger Standalone's Nginx engine to 1.30.4, please see referenced CVEs. Also a LPE bug in Passenger Watchdog's API server was fixed, CVE pending.

Likely solution:
make version 6.2.0 from forky available in trixie,
unwanted side effects to be tested

hth,
wim