-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 May 2026 14:13:33 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: arm64 Version: 1.26.3-3+deb13u5 Distribution: trixie-security Urgency: medium Maintainer: arm64 Build Daemon (arm-conova-03) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u5) trixie-security; urgency=medium . * backport changes from upstream nginx, HTTP/3 address spoofing (CVE-2026-40460), buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP (CVE-2026-40701), buffer overread in the ngx_http_charset_module (CVE-2026-42934) * d/p/CVE-2026-40460.patch add * d/p/CVE-2026-42945.patch add * d/p/CVE-2026-42946.patch add * d/p/CVE-2026-40701.patch add * d/p/CVE-2026-42934.patch add Checksums-Sha1: 32814fd8d805819ab53e5e5dadcc732b55ea72c2 38060 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_arm64.deb f09a3c30a9396b3abfa1b8631d22142ecf3865b5 88784 libnginx-mod-http-geoip_1.26.3-3+deb13u5_arm64.deb 615558854d6db7a63c0cf1bef845ef31fd8bd468 45544 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_arm64.deb 27ac438b2c9151a14b47d24849d6df26df747124 92044 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_arm64.deb 2b2ae181499d1e5db27e347e693f3f343b45762a 108160 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_arm64.deb f3dcbe6fdfb38ebde2efa24db8cb4d7a1ac69281 100044 libnginx-mod-http-perl_1.26.3-3+deb13u5_arm64.deb 5823dd8ffee0b9b6d4a6d462a37a14964955f12f 54288 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_arm64.deb 6e122e9149fa6fcbb2cd20ed724d01f1dbe2b292 90796 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_arm64.deb 33513136c0f080737577868209c303a8ce90c3a9 103524 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_arm64.deb 2f52c8a7f58258050dd69f623eac1fddada6fca6 120048 libnginx-mod-mail_1.26.3-3+deb13u5_arm64.deb 376e6e816253d7eab10e7ef1f24d896f2bbfb1af 182324 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_arm64.deb 4e9f30264adab9677f38959135cd4db67b08cad6 24076 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_arm64.deb 01fe03e5a98d360c7343366bffeac1f5c4675cc3 87960 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_arm64.deb 4483fb76fdc16aeea46fb8b7b5c5282040a605eb 148396 libnginx-mod-stream_1.26.3-3+deb13u5_arm64.deb a365fb980298100e23c45d72eabb83a1c08e0603 1305296 nginx-dbgsym_1.26.3-3+deb13u5_arm64.deb 01edb0b5e867d79baad6c00284b7f745820a71e8 84120 nginx-extras_1.26.3-3+deb13u5_arm64.deb e2702af812e661f7901a3952fe597d21f9a72ca9 13912 nginx_1.26.3-3+deb13u5_arm64-buildd.buildinfo c10da01088616e0742a27bbdf947112581f280d1 569408 nginx_1.26.3-3+deb13u5_arm64.deb Checksums-Sha256: 6d1be933e82773100299ec7d7af75d7c8f228ba143d19e2d5e5e8ef4883065c9 38060 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_arm64.deb 03ada519a45f952e10f7059a5e8d464846de1c5c6aaea8d72b1de21192aa1779 88784 libnginx-mod-http-geoip_1.26.3-3+deb13u5_arm64.deb a340e25062ff7de53c5789ae4b7c618e27d5ba0345b30418b1727b5b48847d13 45544 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_arm64.deb b980f9a8a59d8d781f6073b65927b3048c71c8229151381f029324c61ba0a1ef 92044 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_arm64.deb 64e2d939a53a5186ab09c2794dd5273e5bd9bd50fd70099bdae036d6a3913349 108160 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_arm64.deb 1162cbbdd486833405a36ccdb8778acec542dab27fdaae61519200c4fd39a148 100044 libnginx-mod-http-perl_1.26.3-3+deb13u5_arm64.deb f3c4695ab3d9fd04018c6b08db22574c6a6217375efb4510df143a8e5792acda 54288 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_arm64.deb a4f5f0ff0401a7e8b59536125b9f117ec97fc2fc944459cdba738b10447d1f8e 90796 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_arm64.deb 9358ff62c0eb357c6075cb6893a93d42d5b1d96cce2302d760f206dd06e4f843 103524 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_arm64.deb a93460f23bad29fe3abe7065c5df0808420f6d8bf0bb6ab5b79aa95313c5fcef 120048 libnginx-mod-mail_1.26.3-3+deb13u5_arm64.deb 462acd355d5ac08ed6bfd4485a9ab804520712fc615f66984dec26a860e76880 182324 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_arm64.deb 6b443117b3a63cd0b1a85ad3b3606812ff4a2fd3fe38535f3ef26da9da225780 24076 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_arm64.deb 8fd43224e0a24229dc06a2b57d8ba5259375a0074de0bf1d3e5b78f788c796b0 87960 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_arm64.deb a6910d3a662617466f93100e495992899cc914416045161c09ede7c80bccdaea 148396 libnginx-mod-stream_1.26.3-3+deb13u5_arm64.deb e68de0293087c8e9e6288860cb31abd47f16b0ecc0851299c68963b3d2e20e20 1305296 nginx-dbgsym_1.26.3-3+deb13u5_arm64.deb e65320489741a47310537b1174311f2d340fb9f3543fb21082cd9f30e2b67602 84120 nginx-extras_1.26.3-3+deb13u5_arm64.deb c1622770d5ca9ec3eb74dcd554dc161983fb06d15cf2667a0283d9604e99c7f6 13912 nginx_1.26.3-3+deb13u5_arm64-buildd.buildinfo 566056185e67ccec5abc0350c3bd968aecc3474361f2748d922de463061a0712 569408 nginx_1.26.3-3+deb13u5_arm64.deb Files: 6f90b92db6046332f729c4861989977e 38060 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_arm64.deb 602fb5efadc33c1d834b1a9830125bf8 88784 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u5_arm64.deb 89225784a4460cd37a6040735f62c30e 45544 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_arm64.deb 0f8914c9425b4ede3c5dd306e42352de 92044 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u5_arm64.deb 8a73d7caa1d4d30b79e19716a4d4656f 108160 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_arm64.deb 368a60492556de95c3e2c115645881c8 100044 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u5_arm64.deb 10f0485518646b507e8d1f1b257d3813 54288 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_arm64.deb 72fc963be314574085fca23eda0dcca1 90796 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_arm64.deb 2dc4eb8d2d0d1797af9ad3c13f5c4f4a 103524 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_arm64.deb 047ef3516c37d62f4e261c17da8743bc 120048 httpd optional libnginx-mod-mail_1.26.3-3+deb13u5_arm64.deb 18694c38e8009bd00f20b36f59d45169 182324 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_arm64.deb 0eb3897268f4dc6abefbd7ed88b411a5 24076 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_arm64.deb c3d825079cafc5375d494f706dde5507 87960 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u5_arm64.deb db289979e4f970d1f15e87c8b9d93dad 148396 httpd optional libnginx-mod-stream_1.26.3-3+deb13u5_arm64.deb ad1b6a2e1938c1c45f19681264467257 1305296 debug optional nginx-dbgsym_1.26.3-3+deb13u5_arm64.deb 62647bc20796fe36af098c42b7a70572 84120 httpd optional nginx-extras_1.26.3-3+deb13u5_arm64.deb 2b9e32be3aafa456218c383a6f9d5282 13912 httpd optional nginx_1.26.3-3+deb13u5_arm64-buildd.buildinfo a44f9b49775e5627c216878b07712962 569408 httpd optional nginx_1.26.3-3+deb13u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmoIC+gACgkQXVp1sEH/ 1mIfqQ//Qv0yezl0+/ET60eH+e56rebyGPn5w2INUZf1XgqTVWXMcuZb5GXwCKjX SjCbBy2H2gpphcPPeJwqtczPjp0+u6oa91YVj9EaS8Qrb40+M5HnK8FntdVFNLQt uh0SxjizAALzEn3751rYBXqfZvrjBP0WSAPTY7x6zSj+t+F+8L5UEIgLQVkBctp1 mGPWYMPUIEqPqi0/5gvDK9TdwnAtfo3jISN9Er6Lkbjdcm8KNRCFyGKfMV1xHW87 WvsUIbuY0HUj/z18Rjw09GxnsBf8J0ahGfNbPoKJ2vJPqjX7K4EQXZnRM82bDfYJ 4pEusdWTKIv9zUg/Xd1Q5RQ+CHe+kIJqDEPdWcelPG9etcYtwZr3sDdZhVkd6eoL ExjhlQIyCf3094KFtZXVKgoXSgfeAWo13iLKwNr5Z/oOjUyI99fsqsIVSKmwvZO8 /NvVNyIhc5ug4V+Vhbv3R+3l7p/N758G+e2hbVwKhFfuTzFFoAyWfhMAYJlP+Ofn xSvf5XslzjIPq935UpcpTgtf4q1J3/4JgZNAfvznBUyXgB1CZXZvnB8dazwpkLeH kfDukOW4JmTVEhF+J6scz4VVmvvtFd01nwuM3Ul4dLFmzJYxImRGiV4tcSx5tghk LBJpeqD9QDNleHsN/lD67xdnqU0m2zgvNsCrhhBmRJ1TsKPmjeg= =XI+r -----END PGP SIGNATURE-----