Urgent security issue in NGINX/php-fpm

[TP75]

To whom it may concern.

@system

In the last 24 hours, a new security risk has emerged around NGINX, documented in CVE-2019-11043. This exploit allows for remote code execution on some NGINX and php-fpm configurations. If you do not run NGINX, this exploit does not effect you.

I appreciate such urgent info and the resp. Nextcloud announcement. However, for the convenience of administrators and other interested parties one may add several links such as:

• CVE-2019-11043 at MITRE
• CVE-2019-11043 on the Debian Security Bug Tracker
• CVE-2019-11043 on the Ubuntu CVE Tracker

Beispielhaft sei noch der Artikel Debian und CVE-Kompatibilität für deutschsprachige Personen erwähnt. - English: Debian and CVE compatibility