* SECURITY UPDATE: use-after-free in the worker process when Server-Side Includes were used together with proxy_pass and proxy_buffering off, where a subrequest created for an SSI include while another include had data postponed was posted twice, once from ngx_http_subrequest() and once from ngx_http_postpone_filter(), so a quick finalization ran in both calls and decremented r->main->count more times than it had been incremented, letting an attacker with a man-in-the-middle position on the upstream side achieve a limited modification of worker process memory or a restart of the worker process - debian/patches/CVE-2026-56434.patch: return early instead of appending a request that is already present in the posted_requests list in ngx_http_post_request(), and reset r->write_event_handler to ngx_http_request_empty_handler during active subrequest finalization in ngx_http_finalize_request() in src/http/ngx_http_request.c - CVE-2026-56434