-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 May 2026 14:13:33 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: riscv64 Version: 1.26.3-3+deb13u5 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-03) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u5) trixie-security; urgency=medium . * backport changes from upstream nginx, HTTP/3 address spoofing (CVE-2026-40460), buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP (CVE-2026-40701), buffer overread in the ngx_http_charset_module (CVE-2026-42934) * d/p/CVE-2026-40460.patch add * d/p/CVE-2026-42945.patch add * d/p/CVE-2026-42946.patch add * d/p/CVE-2026-40701.patch add * d/p/CVE-2026-42934.patch add Checksums-Sha1: cbe204cfc6137d15d912fae7f441b94ec0008ce7 37992 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_riscv64.deb 079216a0c9691d1a512bf3a188cd4094cbfbd6ac 88852 libnginx-mod-http-geoip_1.26.3-3+deb13u5_riscv64.deb c7adac258729a2cbc2ae91e3ba79e8a5788981c7 45048 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_riscv64.deb a93510b7b2c74c4a8d3b71b970d1426689800ab0 92416 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_riscv64.deb 172f242d35bae9488b1c3ef49d89617f45faad4b 106868 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_riscv64.deb cf971c29cd28fa2c63a04c5777006e79b6ed7a92 100788 libnginx-mod-http-perl_1.26.3-3+deb13u5_riscv64.deb 156a5ccfe4ea73515dca81db54ab2b8be3649143 53988 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_riscv64.deb 05015b133ed1f6148fe616019ad5e95393181464 90832 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_riscv64.deb 3ae2875f254295795b8b04c500f49daeb17ea1d2 103776 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_riscv64.deb 3e8916b79a515d57a673843a32b508501810a135 124148 libnginx-mod-mail_1.26.3-3+deb13u5_riscv64.deb e2f9a60e83f61df699d30bacd41c7e5f3a365191 183656 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_riscv64.deb 44fd19ea8f7fd33a8c430dcdabec36497d3e6497 23996 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_riscv64.deb 4f93c29047c777b6689c44fc80076b3cdf29f7b7 88132 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_riscv64.deb 2f3a5e621a89fac5a7b68940107e8572a48f5a54 155388 libnginx-mod-stream_1.26.3-3+deb13u5_riscv64.deb 808b74234ecc1d769d43eb35c616012321c0c312 1314692 nginx-dbgsym_1.26.3-3+deb13u5_riscv64.deb 818f83d8cb0d64d17064085497ce7d0d06bb5fc8 84120 nginx-extras_1.26.3-3+deb13u5_riscv64.deb 8dec7adde474302ab8bfda4321d06f4b5ea43c68 13959 nginx_1.26.3-3+deb13u5_riscv64-buildd.buildinfo 649faa006b3365b47651ee7f1e0a19df2491bda7 631012 nginx_1.26.3-3+deb13u5_riscv64.deb Checksums-Sha256: a4e4714b809d33f03fe862906f65d489e5c52e87111c492733536e35dfa95759 37992 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_riscv64.deb ff3b8855919947469db63a1d36be68db8373e3621fa2cec89fd4e22e1d50f36f 88852 libnginx-mod-http-geoip_1.26.3-3+deb13u5_riscv64.deb ffdd230e8d71773512d7fd43afd379a8579b5a41206fc1ce89ca3d99e5ce78b0 45048 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_riscv64.deb 1c1f087d4c7577819cb02a01cc1314093dc5744cb8253e153dab5bd901e583be 92416 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_riscv64.deb 7de20237eb89c25449857672cd9857c055b258364652704a50e14590e4928e71 106868 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_riscv64.deb 3d30691793e756dded400fa6253cf5d50deed05193fd8e68579fb4276954ebbc 100788 libnginx-mod-http-perl_1.26.3-3+deb13u5_riscv64.deb 3475f069e7b957e50d55525df99e963d0f63282d0bfc9a4c10df80fa1368ffb4 53988 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_riscv64.deb 75df19e0c4432fb04f61b7b67e96bd3af752bd615edf7afcff375e4f21144954 90832 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_riscv64.deb 45bac5ac59365046a8d079f69aa5fdcb320bc17264807f97934be8bb92242424 103776 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_riscv64.deb 22b0acf492a119dc249638cc62eb46bda1e257cd766fa060b3a646cb3d8ec436 124148 libnginx-mod-mail_1.26.3-3+deb13u5_riscv64.deb f1f7ef22ed5e860804867fdc8029fad78a7dc8ab3dc8dff6390ed170b215826a 183656 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_riscv64.deb 6c16f86bf7581a0126542bea40123fe96a4b2a9b692838aafbd8e7ed05be7d5c 23996 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_riscv64.deb 2af4c2586188b45b460c466087b38debf6de15b64cb6a3f9ce22c24362bcf889 88132 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_riscv64.deb 702cb93a8ba6d795bcf24a00ae6299bf5ab83a3d265eb245fdacab3e7edfe543 155388 libnginx-mod-stream_1.26.3-3+deb13u5_riscv64.deb 6209014f4f0e5a0381b9726c5cbfb960f8faf721cca0ea62e106626a1e5d770a 1314692 nginx-dbgsym_1.26.3-3+deb13u5_riscv64.deb ce6b1d7b3f932303ddd1c1edbe3ad4c4e81ed8aff820f1798f83a76f06c44abf 84120 nginx-extras_1.26.3-3+deb13u5_riscv64.deb b9aa99180e79b97f08bb777b21a70295611f00f2336a8f8fba8b4d1dda587eed 13959 nginx_1.26.3-3+deb13u5_riscv64-buildd.buildinfo 3b78bbf1bc0162c5d1fccf584c627cc7a31e1daf3cd55ffbc39db9e472d7530a 631012 nginx_1.26.3-3+deb13u5_riscv64.deb Files: 4089bff20358c4855659f70c3990c11d 37992 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_riscv64.deb af0130759b0c993af70023ee4a815b19 88852 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u5_riscv64.deb f7304557fa5ef8ee5c768ffad7aea394 45048 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_riscv64.deb f72db59e0ea1aa01c2d763a9956972d8 92416 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u5_riscv64.deb 64d8de1b1a7420b42306499c5b00f4e4 106868 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_riscv64.deb acadd3a576784e6ffc2d15a912d38431 100788 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u5_riscv64.deb c453617a58af5b84e6c3652c96984283 53988 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_riscv64.deb 1c924e4be865f1f63920301c9cc76b10 90832 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_riscv64.deb 44098479706d9ee98818d9e412171f5f 103776 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_riscv64.deb 056effd45b48f99a5528e82ba31b4e8b 124148 httpd optional libnginx-mod-mail_1.26.3-3+deb13u5_riscv64.deb b799a4d1301a5cfd18b458677cce1f6a 183656 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_riscv64.deb 93a68ef381cba0c9e5b0758230500835 23996 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_riscv64.deb baf9ba7c5774c25ca511c9a3a377e45c 88132 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u5_riscv64.deb a3c4e9d3fbd44cdda4d71f6f869ea2f9 155388 httpd optional libnginx-mod-stream_1.26.3-3+deb13u5_riscv64.deb 1de4c9e745ff5f0a99ac7293cf70194b 1314692 debug optional nginx-dbgsym_1.26.3-3+deb13u5_riscv64.deb 3a03e7fa1b26ca2775c64d1843b66db9 84120 httpd optional nginx-extras_1.26.3-3+deb13u5_riscv64.deb f0bff38c35a6c4f8650740b9a43df88f 13959 httpd optional nginx_1.26.3-3+deb13u5_riscv64-buildd.buildinfo 220a06e8471548105d34dea5a5768e52 631012 httpd optional nginx_1.26.3-3+deb13u5_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExv8RwtKAmv8J56r/6ETk30hvxtkFAmoIEQ8ACgkQ6ETk30hv xtk1Jg/+IelvBoy1OnDseQ83jhzGo5w+7awzpOrWLQSPMglX3SVSvwez1h3KqRXT 3QYwVgNtLiFsjb7+nXOMwkT47u/nReZait7hauj+9jj8eOGEkxTUYZpmVqTBLHo6 tBN/0AiJfU1I1O9h3+M+X3ZhYPH36mWLdm6rG24h6JizW3EXvqmg42HyF7FrSWLN SxTJ4woFmgMkBoHwmGvSnjhgN9O87Ed8pbK+s7lfPp2yBDf0QTEi8KupS1VgHHcq cY/8mwu0JXgtRzB2M183/aWAHU9a2/CunKsIn95W6HsX3Hqe7uX1kwkZcDn9GNyy T8i4ESG1OQNqPnggZAw4cP0vaq13op46L0AgL34wXmYW0iIS2eK1xkqGhEPhiEB6 ak9pPHn15ahyvGG+7dYBumxazIqzB/a3tvwFufZTePVmpjYnhU37vjHfXVJEmru4 Qqy9UUMV6o3hoXTU/2hy/KJSoczHwCY+LbS9o3VX9H6G/0HoErZw96EnFZBT2oo3 5RylPnXp+RK/8TyfKA4VCsFUImXAbZB9VaFOLTdQzWrwBaP8pWJAoHoRqFV8OS96 eyLpgOoClHdfiskbADLzesZ8uXzn+PSqj+DyCXHkRytxVlKAnksHIxbOVe8mhOCK bl1OOwIRYwQtP5gnUlslk825wYqng/fra7LaqbXF14CQUqrEWpY= =xyfP -----END PGP SIGNATURE-----