-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 15 May 2026 14:13:33 +0000
Source: nginx
Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras
Architecture: i386
Version: 1.26.3-3+deb13u5
Distribution: trixie-security
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Description:
 libnginx-mod-http-geoip - GeoIP HTTP module for Nginx
 libnginx-mod-http-image-filter - HTTP image filter module for Nginx
 libnginx-mod-http-perl - Perl module for Nginx
 libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx
 libnginx-mod-mail - Mail module for Nginx
 libnginx-mod-stream - Stream module for Nginx
 libnginx-mod-stream-geoip - GeoIP Stream module for Nginx
 nginx      - small, powerful, scalable web/proxy server
 nginx-extras - nginx web/proxy server (extended version)
Changes:
 nginx (1.26.3-3+deb13u5) trixie-security; urgency=medium
 .
   * backport changes from upstream nginx, HTTP/3 address spoofing
     (CVE-2026-40460), buffer overflow in the ngx_http_rewrite_module
     (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and
     ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP
     (CVE-2026-40701), buffer overread in the ngx_http_charset_module
     (CVE-2026-42934)
     * d/p/CVE-2026-40460.patch add
     * d/p/CVE-2026-42945.patch add
     * d/p/CVE-2026-42946.patch add
     * d/p/CVE-2026-40701.patch add
     * d/p/CVE-2026-42934.patch add
Checksums-Sha1:
 b0fdc961a98361782ee8ffdfa05cfab9300ffbd6 37160 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_i386.deb
 7aa3e58c579641c64317770edb3200211eb3c66b 89088 libnginx-mod-http-geoip_1.26.3-3+deb13u5_i386.deb
 d2067377805d82989de1bf6c7d261c6cd7ad8423 44828 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_i386.deb
 4681cdc04b4ba9b13791c2dd2eb610fdc5c2de6a 92860 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_i386.deb
 0b7ac614776ec8dcf53127f2bff178c12392e87b 104404 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_i386.deb
 d86e09c196ae883c7f8896029fbe4fc482fb21e5 102088 libnginx-mod-http-perl_1.26.3-3+deb13u5_i386.deb
 8aa1b43f6a85d31a537ac85daa422acb8341eff5 53116 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_i386.deb
 be01a2240d6a0b869a0502be80e92a362bca8ff5 91480 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_i386.deb
 bcc8ca9ea834165f03f428daf6ee68b99ed958d2 103136 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_i386.deb
 e1273c275f332c6efd3142ed4ddaf16843b80c6a 125384 libnginx-mod-mail_1.26.3-3+deb13u5_i386.deb
 4a59a0aa96745c06c4da7c8a173522e28066c97e 173428 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_i386.deb
 9f6b4a05fbdd6459d712815618501c8f83ab5157 23508 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_i386.deb
 9e0323f43946a828942fbed6947247540081d19a 88196 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_i386.deb
 5a398520d57afdf622c2d12fb0fe7d615dbf159d 159716 libnginx-mod-stream_1.26.3-3+deb13u5_i386.deb
 c10f71a7869baeaa4ae98d83a9d6b9f2a05e940c 1221348 nginx-dbgsym_1.26.3-3+deb13u5_i386.deb
 89e9969da4fee76be084402d7101a607912cf39b 84120 nginx-extras_1.26.3-3+deb13u5_i386.deb
 f2ee68c82611764b142c8b8e9247b72986fbff91 13781 nginx_1.26.3-3+deb13u5_i386-buildd.buildinfo
 e56e7b8b1e9b7f6d2eee4bb203e66b2adeac0dff 665072 nginx_1.26.3-3+deb13u5_i386.deb
Checksums-Sha256:
 cdf7baa8f3ef18431a521f98cbdb18629be116e5a202b10576080677a0e0dadf 37160 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_i386.deb
 8a75f073eef1dd9007538782902d71e87381ba5b063f8d4d8eb52b5e65d8a019 89088 libnginx-mod-http-geoip_1.26.3-3+deb13u5_i386.deb
 92e0e3dc6a5fed82d2be02bccb6d5614126e832c2249324db920c20e50953afc 44828 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_i386.deb
 55e53929b27f91b335a4cc79461caf849e01a9d18c039ecea1cae927c4f1b2ff 92860 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_i386.deb
 a8649c886f25f5855c9b187727780d653826a53159a5bc15f45fd1e26bc05fd7 104404 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_i386.deb
 1918bf257a2b64e4cc4162ca22023e124f27c5f177e246fe43599fa912869c10 102088 libnginx-mod-http-perl_1.26.3-3+deb13u5_i386.deb
 1a2fb343ceae0e44067edb773a98ec627fe04c40f69eec8886aa957e7269fe67 53116 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_i386.deb
 c694d776c392531467129d4757949f9568bc10789bc3210f72a112d7f9cfca16 91480 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_i386.deb
 ce9943312a4069b506e72fe8f0f03dadd3d3f79c5ac9d4318030d4b63a453fec 103136 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_i386.deb
 683f542a55c3235447cd20ee975dfaeec0e4c73f04be9b05e00f6a01e584660b 125384 libnginx-mod-mail_1.26.3-3+deb13u5_i386.deb
 1d8e685b962bb8cf48d944f14806d524f13bf3efeff039513dfe6de7e702b8b7 173428 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_i386.deb
 c55de99cd3b615845d0057139c887aea44f029d8baf0550831a72cfd63376a22 23508 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_i386.deb
 e97c1449a4eb0c73e2aee2b0edaba964eb2aa38d7a351b2ffbf80ddf5631fc3d 88196 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_i386.deb
 fecfa7d39fe0e75183c26b284dbb52abae47f13134922b24b5c8a792c51dc6ec 159716 libnginx-mod-stream_1.26.3-3+deb13u5_i386.deb
 1212eb1159b3ee5d35abfd5624afd47986997c95da81a5ece6fcab0a24738570 1221348 nginx-dbgsym_1.26.3-3+deb13u5_i386.deb
 9cb8fd4030e61ce2110a44829e31f0a522b28b9f618b595581679d5821d6379a 84120 nginx-extras_1.26.3-3+deb13u5_i386.deb
 54cc09b51727591b8743a2b6a66e795e6997e3951e856a55d3e07bacdd942675 13781 nginx_1.26.3-3+deb13u5_i386-buildd.buildinfo
 a3da71891d83ee2911b2b84ffe1125acb4dcc665d996d5aa755a75dc79641f2d 665072 nginx_1.26.3-3+deb13u5_i386.deb
Files:
 97157d0879e131633c3672913f86084f 37160 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_i386.deb
 0ce707a8167f261bbc0684f30fc3d515 89088 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u5_i386.deb
 6f0f32b77c12a54aa089fd46523d815c 44828 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_i386.deb
 d40c39540e1a6bf2ff96d61cfd60a47b 92860 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u5_i386.deb
 256c385fba7b6273a0e66eeb2ad5f5e5 104404 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_i386.deb
 39474d60a4c64948a842e6ecd3ec8ff6 102088 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u5_i386.deb
 fa984c1b16a12bf5b5c23e6e8d5ba5ae 53116 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_i386.deb
 d44f1840e67ac7114c8355b1905aa614 91480 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_i386.deb
 cc2afb1c86841b914d905a1b772b915c 103136 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_i386.deb
 90ed1db8d5e67afed974c82f4d2a484e 125384 httpd optional libnginx-mod-mail_1.26.3-3+deb13u5_i386.deb
 2cc37b6939c5c8f662f24e4c79127d48 173428 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_i386.deb
 87af4ef627e1486217b4cd929c7ebc1b 23508 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_i386.deb
 aea88101918f9aec1c30fbc3f20f49b0 88196 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u5_i386.deb
 368042ffaf7dad09d3e895abdcd496a3 159716 httpd optional libnginx-mod-stream_1.26.3-3+deb13u5_i386.deb
 a12e0c8c8be480db5ddbb4c12d548edc 1221348 debug optional nginx-dbgsym_1.26.3-3+deb13u5_i386.deb
 499001559a037287aede69ebeac05cc2 84120 httpd optional nginx-extras_1.26.3-3+deb13u5_i386.deb
 f5eeeb51179560e836148388fdc64b3d 13781 httpd optional nginx_1.26.3-3+deb13u5_i386-buildd.buildinfo
 64ce646a007b4729760c5a699ab96aa4 665072 httpd optional nginx_1.26.3-3+deb13u5_i386.deb

-----BEGIN PGP SIGNATURE-----
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=17U7
-----END PGP SIGNATURE-----