-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 May 2026 14:13:33 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armel Version: 1.26.3-3+deb13u5 Distribution: trixie-security Urgency: medium Maintainer: armel Build Daemon (arm-ubc-03) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u5) trixie-security; urgency=medium . * backport changes from upstream nginx, HTTP/3 address spoofing (CVE-2026-40460), buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP (CVE-2026-40701), buffer overread in the ngx_http_charset_module (CVE-2026-42934) * d/p/CVE-2026-40460.patch add * d/p/CVE-2026-42945.patch add * d/p/CVE-2026-42946.patch add * d/p/CVE-2026-40701.patch add * d/p/CVE-2026-42934.patch add Checksums-Sha1: 6dda733e2961149453d16e845151bc9f1c6bcac6 38380 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_armel.deb 442cbfe65f0ac48e0d20681c9bffc2d09fd05b87 88772 libnginx-mod-http-geoip_1.26.3-3+deb13u5_armel.deb b96e622b2d05154a91b237ae16d90384196a4bd8 46212 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_armel.deb 55f77886ddc2b2cc3fd393664797fad655c8d29a 92784 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_armel.deb 6cd4b66f58a4cd4a4eb6df8d0d8d81b70340ecea 108360 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_armel.deb 85c45167cc103362bb00fa0b57a5fd76c21d78d5 98604 libnginx-mod-http-perl_1.26.3-3+deb13u5_armel.deb d2f84b35ce16c61239dbbcc92a6e6acc631e2704 54412 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_armel.deb 5c9db563a3c88a7f6c9bcd88ff81b4e7210a7647 90016 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_armel.deb 3cfd44aaa100b01017546326469085093376a151 109888 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_armel.deb b65c428b714bad56f9b9eecaed276076a6abb2e0 117812 libnginx-mod-mail_1.26.3-3+deb13u5_armel.deb d35c050cd681968184b5330fc35c7750664fafc7 188820 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_armel.deb d17145f2a4e8fc2c5b99edddb39cfa155d74959d 24536 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_armel.deb f24fe12f0f0a93ab280244fd429f5ec014915805 88072 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_armel.deb 0fedc36f0dc8ae5ae75737d947333d3fca97e0c0 142828 libnginx-mod-stream_1.26.3-3+deb13u5_armel.deb e49849c43d2527615370c5cd6f17d929566a6970 1319436 nginx-dbgsym_1.26.3-3+deb13u5_armel.deb 6c5279cecaf94f999e5bc1bc4243da42620b74c2 84120 nginx-extras_1.26.3-3+deb13u5_armel.deb 6397b180ca54f948486b23a53c66b1f0f3aa1eb3 13774 nginx_1.26.3-3+deb13u5_armel-buildd.buildinfo 6d548a8e7d15215c2d181e205b642015ccb4e884 537548 nginx_1.26.3-3+deb13u5_armel.deb Checksums-Sha256: 0fef4eb0604113ec168aa1be8acbdcb98cfec7c58c2027d6486fb092831a9638 38380 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_armel.deb 7049bf12082e5f31a4b9c0bcce56b2a995b3c15ddb5a16893fd446b64b791bd5 88772 libnginx-mod-http-geoip_1.26.3-3+deb13u5_armel.deb 0421d5241103228e90435d4ddef927593ee1b90ea93ef47b1440c878dbeb9534 46212 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_armel.deb 47fefabafd1813271d8f869e0b9f08894614f2063b24a7742d26420acaace207 92784 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_armel.deb 791f41cbe53fba183c41641a717da929836831de8148ef55674666855542c42c 108360 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_armel.deb 83e88439e7212db1c8591df2c7fc3e24d39738e58f141389be4869d712b9c9d2 98604 libnginx-mod-http-perl_1.26.3-3+deb13u5_armel.deb b7a69f3b229a9e8a0b4e97d99487082470c3955e2999a822dd334dc7c573d3fb 54412 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_armel.deb 57bcab5f7b0ed08622a1ff6cf66ae0c6e406ae63196d12efec33c42ff3b68454 90016 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_armel.deb c3a15e9b55f0f028c232d8bbe78fe59cca2a054f53b84cced38e2cb72c9227c6 109888 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_armel.deb 09e41da875a3059d7d57d7bc2e78980b13028536a09323fb1b4e60309c629b62 117812 libnginx-mod-mail_1.26.3-3+deb13u5_armel.deb 4764449a37521d2d351a51adfb9da1a56bd07a8d00bc2c6a2146d913bdf9af5a 188820 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_armel.deb 99eb7ba63c5e365da74774d22c53f56414f77aa3cfbdf8b6ed0dc4bbf6a25689 24536 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_armel.deb 071abb7705c1d2e5b532a77e2f262cecc6209b053fbe13aabb72a67d60686127 88072 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_armel.deb 06d121d6f69909fe11acfd39268174517a00018675fd1c8ae27a9d2d2739c92d 142828 libnginx-mod-stream_1.26.3-3+deb13u5_armel.deb 5527f91d7bee517b1df3d2ff719ab0994cfd51a3bec3444e44d361c770574c80 1319436 nginx-dbgsym_1.26.3-3+deb13u5_armel.deb 6afb5ebae9e9a0ade302370fa304ec287ea5ed7261eb719c3abc9f6ba1be1e59 84120 nginx-extras_1.26.3-3+deb13u5_armel.deb d154dd1b8ba42412ad9301185fcd17c0e990d4036d94182bacff170439951dd5 13774 nginx_1.26.3-3+deb13u5_armel-buildd.buildinfo fc32407bd07b94f3803989fde3032b5624bffbf3f2b81ac96ea15578357442d1 537548 nginx_1.26.3-3+deb13u5_armel.deb Files: 95cf4978b2bdc46de527e15f7bb6ff2b 38380 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_armel.deb 4030c0dae8b11ba88f953ce8943251a2 88772 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u5_armel.deb e5edfb3e6b46898a61a88688581c43d5 46212 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_armel.deb c32b1277cb2be1e0df8e4bac54d13df1 92784 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u5_armel.deb 1849e276dd0460d00014fb9b8305c99b 108360 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_armel.deb f80c9ea6f7941603f0488544d47af7a7 98604 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u5_armel.deb d654b42763ec2bfc320b211538ca9a8f 54412 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_armel.deb c374a717f48edef7811c5235b152bbe9 90016 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_armel.deb 13ad0b26b2c96fd43dbb815615ed80d3 109888 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_armel.deb 09a4e6bec8f6f20d8bc4cdcb126389a6 117812 httpd optional libnginx-mod-mail_1.26.3-3+deb13u5_armel.deb ee36f650b0aadd0b43f50a6940f6faa4 188820 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_armel.deb 1e5295d9167e591000761797eee46b6b 24536 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_armel.deb 0c564ec04f629d1153a59ae8dc6c3d03 88072 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u5_armel.deb 14a52d76f56a2e96f28cfa8e87558b68 142828 httpd optional libnginx-mod-stream_1.26.3-3+deb13u5_armel.deb 39faa8db1924261f3da3476345dcf036 1319436 debug optional nginx-dbgsym_1.26.3-3+deb13u5_armel.deb 22bb5a8a9a04a4179ec3f17035d12b85 84120 httpd optional nginx-extras_1.26.3-3+deb13u5_armel.deb 326d617f2975c5629a31bb387bb24216 13774 httpd optional nginx_1.26.3-3+deb13u5_armel-buildd.buildinfo 51d1aa70995d7f99bdd3a2ef346e5513 537548 httpd optional nginx_1.26.3-3+deb13u5_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmoIC+8ACgkQvzDqKQSG l8VVlw/+LDt44ucwoiBqv3vBiE2aDvWh0YqIA7RJfN8gW3NV8QLPKUmaEp7VlIzz AC7DMvgQuR+g9p7I9wIDKtvQRtEpzZlG/Y77JXVwNHmtkdKRRzEveUwrfHN2JfhI 3CVD1pRE6ecyzoyTytq+vNbTDrG+RCit9yQZC8Qmzz44nm3+QJcdH2J9LftnoN2I QJmnGO2pTW8RAOh0HlsAU3mboqR8J2ghoG2n8s8M+43BQ/HBX0ZTLhIPwAgbsYn+ djjbdYEHrfJNT5QGFhxQrcIB1+GEeCLkfR0RIluKY818C8jBKJpAi0O2mNtEaMRi AfBQ1ihoEbDltiOJDtLB2sIpC7Snz3BKmDVoUTC7cCYy60nnCSnylWknRsBT/4wF SmFHpFjIRTW8h5a8I9k+uow4lmiIDFfN/CdA2rudMEU84FJUeOVj9KwRTwmFXsmM Om6uKMtFefcYRoopkr8fN4fB87VCPeXsDnwD0C87LSQDZ0d+3rc554Sc4hfV0+gM sKklVPhnmn74ceTy2HsG0L/9Dk7lyyIrANkiCcO4ELC8fzRLpNDtqmLucwXpHlxf 3om6lJ8aK0mkLBaKkEyiHzrGVNvhwDq3RBbKX0C+8UzTg4SWJZYwFXDUN1y8hE/l gARE6JRK6bTSBquLckW8gTPi18QLvX5kObJtYPyQcvriTnbJvRM= =JkjO -----END PGP SIGNATURE-----