-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Sep 2026 17:02:15 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: arm64 Version: 1.26.3-3+deb13u8 Distribution: trixie-security Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u8) trixie-security; urgency=medium . * d/t/abicheck add, detect unintended API changes in the nginx-dev package by comparing header files with previous version * d/p/CVE-2026-56434.patch add, backport fix for use-after-free when using ngx_http_ssi_module (CVE-2026-56434) * d/p/CVE-2026-60005.patch add, backport fix for memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005) * d/p/CVE-2026-42533.patch add, backport fix for buffer overflow vulnerability when using map with regex (CVE-2026-42533) A big thanks to Aron Xu for preparing the patch. Checksums-Sha1: e66588959c1b16e3e9f453b4541e301b82736bf1 38056 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_arm64.deb d1e480e25b8f1071761ed5ecca675ac3f75f84e9 89404 libnginx-mod-http-geoip_1.26.3-3+deb13u8_arm64.deb 83ebe4052b519b13bf2476aaf320550762fa7411 45540 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_arm64.deb c9aef21b3fb684e8ba2a801f3a952ec6a171e395 92712 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_arm64.deb 301cbee6cc1d5c0f6e381e1f04e2d2c0b550e185 108228 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_arm64.deb 9d146900a2ccd739b685284b9ad83a66026a38a3 100704 libnginx-mod-http-perl_1.26.3-3+deb13u8_arm64.deb a1c24de3cac612d5e00f3d830a4eda26e6df5467 54308 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_arm64.deb b069b4dad7a36027e4df47ba67b8568fbf82b4de 91452 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_arm64.deb 138a45d15aa24e236ae2b567e2b2d462c2c73676 103508 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_arm64.deb cfcdb14cfb50547bc1ccab7294a66980a2dbb6a1 120740 libnginx-mod-mail_1.26.3-3+deb13u8_arm64.deb ccbec0bd2a3c32a47422fcf739c8204df586835e 184700 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_arm64.deb 5cb9dcdd70a63350a5be91b38aa805c397047852 24096 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_arm64.deb 83d1d8df947e5ebff547fb10269ca5a1dc0bcf25 88608 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_arm64.deb 1c48fb3555eb9f95d190d436692a4bf730790dc7 149264 libnginx-mod-stream_1.26.3-3+deb13u8_arm64.deb 62a1084b42c031b055fda8dbffdbfbff591b30d7 1313488 nginx-dbgsym_1.26.3-3+deb13u8_arm64.deb 6afad72ca9be5a39becd09184bcdf3f6900e0fdb 84788 nginx-extras_1.26.3-3+deb13u8_arm64.deb 071a0a8c952e982027e9caee450bcb0c130767a7 14240 nginx_1.26.3-3+deb13u8_arm64-buildd.buildinfo 00d9d2a6263d96b18d13a1494b0c2118d2c0f1b2 571988 nginx_1.26.3-3+deb13u8_arm64.deb Checksums-Sha256: 08efbb473f2786590ad7b327fe041f50a7b381718304e8626f560cb9898a2c52 38056 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_arm64.deb 4820082b633affb52f153d2d1d75ff911e782a4237d2f1ea7933ac9ac87607e9 89404 libnginx-mod-http-geoip_1.26.3-3+deb13u8_arm64.deb 71d813d0ff682a6da50880335fb387f606e7e31a3288563ed41f52d6c3f8f40d 45540 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_arm64.deb 13dbe57ee703e63a2f5d0f3161d8b741649ef4aa86f0bd0adf6ba17a43b41efb 92712 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_arm64.deb cff358abbf6c4cf0065262b144d4ac1f0f4727a720cbea58f03753baf69c74e2 108228 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_arm64.deb 9c357d06503369352a4e4edc40c94df2868c9740dca83d45a21ff8657895c97d 100704 libnginx-mod-http-perl_1.26.3-3+deb13u8_arm64.deb 93b64e5cafca935fdb55058686fe67f222dd19cbbe056e26a992c6edc206b8f0 54308 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_arm64.deb da6042c4937d26e9a5ceefdd5c0b9c4f679d52884801972c9e8cc06a7c77c53f 91452 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_arm64.deb 2cfe2a04b416b03a9a8f9c1842d43a805d035d96978309abccbb5078bbbc0102 103508 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_arm64.deb 0375c7e97406f76db0c7535616d36a6151d971b3e92ca1d216130d833ba14c5a 120740 libnginx-mod-mail_1.26.3-3+deb13u8_arm64.deb 6f26c1c0e7fa1d2d95f44cf15cbd8dca3d7a8acab8b53bf7ef30fc87278d606a 184700 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_arm64.deb c96fcc95c8a1a8cde48ca510a23bc7374e8865aa0ef209977bcf1d29702fc813 24096 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_arm64.deb bb0cd3e003d1f86274ef81c967e41b12fc8fbeff139470dbef6d931a34df0b92 88608 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_arm64.deb 28ffd6572a7ee748d33c4877e72eed3fd3da06c80bb31698e047f61796a3fdb5 149264 libnginx-mod-stream_1.26.3-3+deb13u8_arm64.deb 0c23dbdbfaa3032d543055db4829ab209ec4802e674476ab40383663d0caef0e 1313488 nginx-dbgsym_1.26.3-3+deb13u8_arm64.deb 9fe33a2586e82cfbd4f0e60a1c311ca237a5dc728f40b20443a829efb0849a2b 84788 nginx-extras_1.26.3-3+deb13u8_arm64.deb 8b86051b98eb5d29a6cd0d3965affcd5360a5ee4b5b3492270c8b13a15352323 14240 nginx_1.26.3-3+deb13u8_arm64-buildd.buildinfo 6af5acd85d0483aa242a318e212a1b6e07ec8f2d7fbb5cc9e8924d5af7fb2721 571988 nginx_1.26.3-3+deb13u8_arm64.deb Files: 84c1df71fe8288eff2d82d556eff0fe4 38056 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_arm64.deb 637df84b77b2b327ac2755db74858619 89404 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u8_arm64.deb 11a64a8b35f8382e23c586c4ef695ad3 45540 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_arm64.deb 913e7913a44552b4801964590cd54055 92712 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u8_arm64.deb b623afd197049f7e71d7987c9a85eff4 108228 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_arm64.deb fa3a5741d0a4bf91a5d3f4b3b57b177b 100704 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u8_arm64.deb 0b5b6d6ec7b3548c71e2256b82fa3a45 54308 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_arm64.deb d9b56d4467a92f7adbc93b6e9b46159c 91452 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_arm64.deb f2e18c0d57898336770b998e44e1b685 103508 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_arm64.deb 32213cba90bf5dfb660e26882d3b868d 120740 httpd optional libnginx-mod-mail_1.26.3-3+deb13u8_arm64.deb 4510e3319fe48dfeed2513d655a4101b 184700 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_arm64.deb 5f320aba998f40e0d4cfeae71473783f 24096 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_arm64.deb 5067d3fc532f88279f978c83c34bd7ea 88608 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u8_arm64.deb f9ab0df724c087b388d1c49a5dfa8a9a 149264 httpd optional libnginx-mod-stream_1.26.3-3+deb13u8_arm64.deb 55e032de48afa0b86fefdfe9f6b0c951 1313488 debug optional nginx-dbgsym_1.26.3-3+deb13u8_arm64.deb 42933b99ac6d98179ea4445e4b82bacf 84788 httpd optional nginx-extras_1.26.3-3+deb13u8_arm64.deb d90bb3476794905896b260fcb82d665a 14240 httpd optional nginx_1.26.3-3+deb13u8_arm64-buildd.buildinfo ad51e30d2a89a28986a346d4d0c3c03f 571988 httpd optional nginx_1.26.3-3+deb13u8_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmqkFKMACgkQxqCFmsOW goYY/Q//Wch1yLkP0mKbgrLdVL343j5R273VYZT6wcYfDKGKmEmuXxSrgnCxtfmd CDJb8JTJT3MezKH0pkYZTi7LcfWSrfP1P9nCHiUHcD+ZY4+e1aVq+mOv0VibwMED MzfmShNphidebGV6bKs0tuIMFih5FP0uPPqiRn+y7RO5IB9sk7j8OFNphmDpbcp5 8PoL0so4wJWj5Hr23XXt9/m+hwt5KHjremDP0AxMZJD9/BMtg7QL0CEE743gXF3s pNYyDzs8zPlnhTnHXWkAbjD/rSN0M5FffoCLkI1jPilwrwK9TZ/W1GA/BCjCJZ8W /iV/eGHQrVBhdC6omjPgnrDGVfNE5P90MBtFIWlAopBtR1ClUCSEXYtJtjnvrTeP kgYr0Pb0HV2nTM6MyXYKAKIjKWsGQLlWHYo3l+5XLwzZQiDigcU8wfZHOjMP8Yi7 YOO5VVkX7mFGFONNlCTuFE5OIkhpY2dtfR5ERd1aZcjCLXYIj8NOASKvsYbVehOr dR4jTp6zV1+CEb3fRwG5M88I3Wut6XArW6UgxK+2C2xx9ASlDNRlVesmN/w9XNWB Ls1MdbAjxOOWSEofaq3WndSATpwH91j8ULOprsqXWvhKIRTauW5U/RSeYfOsHzMz gPxbTEc72jaDuR+FWN/EIndwJYw4Ajy59nBQdNIZxKmT+g4vq4k= =pc99 -----END PGP SIGNATURE-----