-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 May 2026 14:13:33 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armhf Version: 1.26.3-3+deb13u5 Distribution: trixie-security Urgency: medium Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u5) trixie-security; urgency=medium . * backport changes from upstream nginx, HTTP/3 address spoofing (CVE-2026-40460), buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP (CVE-2026-40701), buffer overread in the ngx_http_charset_module (CVE-2026-42934) * d/p/CVE-2026-40460.patch add * d/p/CVE-2026-42945.patch add * d/p/CVE-2026-42946.patch add * d/p/CVE-2026-40701.patch add * d/p/CVE-2026-42934.patch add Checksums-Sha1: 16c0ed9b07259d6fc1d09594f097a90d309458ce 38368 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_armhf.deb bbd1203836ded3769524fa3f4d75468e283b6a25 88116 libnginx-mod-http-geoip_1.26.3-3+deb13u5_armhf.deb 87a0c7e5d19c21f2348cceb585dd985a4be388d4 45824 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_armhf.deb 1c93afcf8378fad63e90656a065083bff7bfb01e 91348 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_armhf.deb 01b16f9680e9ca52497a79f8ff26b3d2c1b325d6 108412 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_armhf.deb d27718f2f1f71e41205efd6bb26da018d183e04e 98512 libnginx-mod-http-perl_1.26.3-3+deb13u5_armhf.deb a0a5d559333498d014676428951717d0af1321ad 54496 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_armhf.deb 97612ced615deee6f3947e52d84e00a31b0d9ee9 89984 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_armhf.deb 02300b88430130347974ba2cf6246e2b755f841c 110784 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_armhf.deb f2a781839a95a8b6cb024d6bbd7ac097b4c0c294 118244 libnginx-mod-mail_1.26.3-3+deb13u5_armhf.deb 0fb74f4b0f642d48da6fcf563b7a069aea2fc4ce 190824 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_armhf.deb 11a2af36af2536e36d7a8a522d4add3025039ffd 24600 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_armhf.deb 06b0792284af95d8b55d1acbf610b17dcb1f85e9 87364 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_armhf.deb ffb425d0adf27a7c4966aa5dc385eb3747fbcd50 142980 libnginx-mod-stream_1.26.3-3+deb13u5_armhf.deb 5b28fed47d95423ebce414bc9b3094b146b64a67 1342220 nginx-dbgsym_1.26.3-3+deb13u5_armhf.deb ea91718aca0108d736eb2f71b341fa3b2327604e 84120 nginx-extras_1.26.3-3+deb13u5_armhf.deb 0c46b9937dad49980b0a998a926fc5fea63514f1 13788 nginx_1.26.3-3+deb13u5_armhf-buildd.buildinfo 734b52ad35d05575d7ea969774eba9cf9817dc03 549420 nginx_1.26.3-3+deb13u5_armhf.deb Checksums-Sha256: 64f8f6eab2eaca191eb3592f51095d0a7fac3f0de746904730f85867555b725a 38368 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_armhf.deb 5bb385ce64d2aa55648bb7565b63ec86e9cb7e2b58de573adb5217aea138037b 88116 libnginx-mod-http-geoip_1.26.3-3+deb13u5_armhf.deb 524a4f01e593141b435852698b1d10efce5b5b777121779baf9b0acb25638c3f 45824 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_armhf.deb 42a67fed6de03b1184105673b71ad0d36995080f81e4924b93f73adebd54c4fe 91348 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_armhf.deb f8d24640df31e71a10095f9d60bf8a1d0efee2fcfc1a4d58516bdd3980b437a2 108412 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_armhf.deb abb61cbd30ec3d1defdcdf6a8be3e4b00cf3e597970650b325d51d1c594e0e29 98512 libnginx-mod-http-perl_1.26.3-3+deb13u5_armhf.deb 73efe82ea3f1bec7228cc1bc9db5b01edce6895508f729ccf07d5fd5fe1f4d16 54496 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_armhf.deb a4e537c244040801500329826ffabbad3ab3e9c139e37f81be607f46e2fb528e 89984 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_armhf.deb 0f586655d4380e24737b1ea5e03443a2fc5647ff61d470b8331393712939b407 110784 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_armhf.deb 6b0fb1c3a993b810efd346fe80346bc664b094976f44be5386e45a64626b9115 118244 libnginx-mod-mail_1.26.3-3+deb13u5_armhf.deb 087abda727dafc9378abde90a056723a5fad12d7893c9b44dc5efc406f7d8329 190824 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_armhf.deb fbd069f6468e116e8c1edc6c7acf474f9c4e59d5728325c501d7750f53ec05ac 24600 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_armhf.deb 4730482eb5030136eb28ae7418fe50fc12520a5865091da031a1e6bffe9220a8 87364 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_armhf.deb 85e49af850312dc66708ad7a5e5700dc442ff1e7692395833e13954d34668311 142980 libnginx-mod-stream_1.26.3-3+deb13u5_armhf.deb 7806a469f27f8400ba3a71392a0391203bd1a4173f0a697cfb117b8d8744ca45 1342220 nginx-dbgsym_1.26.3-3+deb13u5_armhf.deb 4f69a7bc1d620aab95b7c88562ea43fb2c3376c814d6c6ce15d6e49caae80ecb 84120 nginx-extras_1.26.3-3+deb13u5_armhf.deb 35ceed27a60a5af1fae3243baa7c124978161fe6d564fa53e03194ae3635e6ae 13788 nginx_1.26.3-3+deb13u5_armhf-buildd.buildinfo 9bb2c140a4ffce728b572f9fc007147fabee3cff761eefbebcc025c662422c34 549420 nginx_1.26.3-3+deb13u5_armhf.deb Files: 77a9624555d83924acde5e9cc7aaa0f7 38368 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_armhf.deb b49acdfae6da0d6c77ecd753265ba6de 88116 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u5_armhf.deb 7e6101ad31fc1273da2b4c702392c2c9 45824 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_armhf.deb 1b1af921585c1ece50607d63ac483f63 91348 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u5_armhf.deb 0b0180f8b01e63b6060750d7d9b8070c 108412 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_armhf.deb 4802a4ab463bb996724c85762d0711f0 98512 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u5_armhf.deb 6db1fa9081b0025fa4dfdb6be8af376c 54496 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_armhf.deb ac64f40cee56c249f3fbc25f1bf6a693 89984 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_armhf.deb 46fcb461724e5f25b7b6272134d4c975 110784 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_armhf.deb 74b8bbe0c3fd7c4a6bec6cf58a73bfa6 118244 httpd optional libnginx-mod-mail_1.26.3-3+deb13u5_armhf.deb 3dc41c82e00daa209fb6e5133db3c808 190824 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_armhf.deb 1b383ba5c0dfecf6e8d71e39b3877f24 24600 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_armhf.deb 5cea1dc46f64292475b8d282738b06fe 87364 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u5_armhf.deb 0940d231e90fa1de6d7978d4b209f476 142980 httpd optional libnginx-mod-stream_1.26.3-3+deb13u5_armhf.deb b3097f87e857f6862761f633ae484ad2 1342220 debug optional nginx-dbgsym_1.26.3-3+deb13u5_armhf.deb 6a9b0ce910f11be0ba0b9e77012e83cf 84120 httpd optional nginx-extras_1.26.3-3+deb13u5_armhf.deb 79ec213118a24968dec1d4d2dbbbcf30 13788 httpd optional nginx_1.26.3-3+deb13u5_armhf-buildd.buildinfo 75342a52021cecc9d6d79cf8cfd6cdf7 549420 httpd optional nginx_1.26.3-3+deb13u5_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmoIC+gACgkQ8U6eOZMp j68BTxAAkp+CS6wYAqJIzsKcPlcKMuZiI3HZcri9ahKbkqY5a1Rm1KognARXrKaT pPWxEuFZqimAfB9DvOsgu4nphbdiJvsFYaffWBSY2APTuyXFIU+bCGsPiG0v2vxV XrBe0KYRU1UMcH8d81v9rEd27ORyQVOmOmiJ3t/rLyBaNDLvqE4enhSah7f9mTI2 wjxkId6NWgGegiS/VfdnN3GUL+cgHeU907tM8JECbKteSDPuFbNXz06p8wTSyNlt iVOJFu9DFjYQI2eKVx4nZFS0/bKOXa1Mj9k/HVATCJMBvC7tAny7vAfQxC6FIVIO 5Cc7MPx0ucUji0LSo1niveQStBp/40TisxMPgDDSRVThq9+SuAHzAY7j2OaJAJRk 4JKhtDTImBcRU9zURNHIQQgUKNE6ObVHYfT85c2QJbkXK1BNB69Zhh58hKX0Ns+E jBLXriLcCElKeuHdp05aGpp4LQ1M8ahFAWDFK6y6z/Cbr9FHNjUc19w3Gc1q4ASx SeVe2aHHd0dIGsmP9ZkDa+2+E/H0TIOALu1ntZRp5qWed9P71JJjylobIf69CyGE R3UKIgozChIVuYaCuvnK/e/I38N3u/RoGCkOHOZ5qBMyegJ7EGKGLn/AK+a1fGiV pNaJ5A+HGFKSOoirCC4BpIAOOTPzc8xJxg44S8HI2/KR0KBpo7U= =QIAx -----END PGP SIGNATURE-----