For Cauldron, I asked for a freeze move.

Version: Cauldron => 9
Source RPM: nginx-1.29.5-1.mga10.src.rpm, nginx-1.26.3-1.2.mga9.src.rpm => nginx-1.26.3-1.2.mga9.src.rpm
Flags: affects_mga9+ => (none)
Whiteboard: MGA9TOO => (none)

Meaning Cauldron is done! Thanks. Remains M9.

Assigning globally, CC'ing mrambo3501 who put up version 1.29.1 not so long ago.

CC: (none) => mhrambo3501
Assignee: bugsquad => pkg-bugs

Updated package built for Mageia 9.

Advisory:
========================

Updated nginx package fixes security vulnerabilities:

Buffer overflow in ngx_http_dav_module (CVE-2026-27654)
Buffer overflow in the ngx_http_mp4_module (CVE-2026-27784)
Buffer overflow in the ngx_http_mp4_module (CVE-2026-32647)
NULL pointer dereference while using CRAM-MD5 or APOP (CVE-2026-27651)
Injection in auth_http and XCLIENT (CVE-2026-28753)
OCSP result bypass in stream (CVE-2026-28755)


References:
https://www.openwall.com/lists/oss-security/2026/03/26/3
https://nvd.nist.gov/vuln/detail/CVE-2026-27654
https://nvd.nist.gov/vuln/detail/CVE-2026-27784
https://nvd.nist.gov/vuln/detail/CVE-2026-32647
https://nvd.nist.gov/vuln/detail/CVE-2026-27651
https://nvd.nist.gov/vuln/detail/CVE-2026-28753
https://nvd.nist.gov/vuln/detail/CVE-2026-28755
========================

Updated packages in core/updates_testing:
========================
nginx-1.29.7-1.mga9.x86_64.rpm

from nginx-1.29.7-1.mga9.src.rpm

Assignee: pkg-bugs => qa-bugs

MGA9-64 server Plasma Wayland on Compaq H000SB
No installation issues.
Ref bug 34585.
# systemctl start nginx
# systemctl -l status nginx
● nginx.service - The nginx HTTP and reverse proxy server
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; preset: disabled)
     Active: active (running) since Mon 2026-05-04 11:39:37 CEST; 15s ago
    Process: 92492 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=0/SUCCESS)
    Process: 92502 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS)
   Main PID: 92506 (nginx)
      Tasks: 2 (limit: 8728)
     Memory: 5.0M
        CPU: 362ms
     CGroup: /system.slice/nginx.service
             ├─92506 "nginx: master process /usr/sbin/nginx"
             └─92507 "nginx: worker process"

May 04 11:39:36 mach3.hviaene.thuis systemd[1]: Starting nginx.service...
May 04 11:39:37 mach3.hviaene.thuis nginx[92492]: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
May 04 11:39:37 mach3.hviaene.thuis nginx[92492]: nginx: configuration file /etc/nginx/nginx.conf test is successful
May 04 11:39:37 mach3.hviaene.thuis systemd[1]: Started nginx.service.

Point to http://localhost/ and get test page "Welcome to nginx 1.29.7 on Mageia!"
OK for me

Flags: (none) => test_passed_mga9_64+
Whiteboard: (none) => MGA9-64-OK
CC: (none) => herman.viaene

Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2026-0111.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED