-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Sep 2026 17:02:15 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: amd64 Version: 1.26.3-3+deb13u8 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u8) trixie-security; urgency=medium . * d/t/abicheck add, detect unintended API changes in the nginx-dev package by comparing header files with previous version * d/p/CVE-2026-56434.patch add, backport fix for use-after-free when using ngx_http_ssi_module (CVE-2026-56434) * d/p/CVE-2026-60005.patch add, backport fix for memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005) * d/p/CVE-2026-42533.patch add, backport fix for buffer overflow vulnerability when using map with regex (CVE-2026-42533) A big thanks to Aron Xu for preparing the patch. Checksums-Sha1: f7ab8d82f8fc968232bf0df940d9dabbe9822ae7 38100 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_amd64.deb 200d8f31f26e4002fab1e2f629bd876dd8741b0d 89356 libnginx-mod-http-geoip_1.26.3-3+deb13u8_amd64.deb 4d79367b5c8de3e7d6c75a3767682c53140b1974 46404 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_amd64.deb aff4647db5c070134c94410b162d41da12fe4936 93096 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_amd64.deb c4c08e8173b7fb37f4ceec42f831b9e3477590e7 109640 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_amd64.deb 9e7d9a026830bed5ccf621920ef48368a265afe2 101576 libnginx-mod-http-perl_1.26.3-3+deb13u8_amd64.deb 1351fbe80e913b65aefce96db81bba0b53cc3589 54408 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_amd64.deb dafb224151eef1fffa1de732ae0b9605bcc0f036 91576 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_amd64.deb b4daccd03b972bf92003fafee2852042bd30bc29 105132 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_amd64.deb 0c6b9d4c31fc4d1f687d77fd3ae74f9b0965fee5 123460 libnginx-mod-mail_1.26.3-3+deb13u8_amd64.deb 94b95d2191b6189e52ef7ccfef3ae9d57f81e0bd 188320 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_amd64.deb f4df1698b62172acc368416ad20e43bda91bb8f5 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_amd64.deb 19184f7411f683ddb040410ee0687eeb07e90a66 88548 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_amd64.deb 2e8332210700c0fe738b3fca1a710a7bccd4c415 153940 libnginx-mod-stream_1.26.3-3+deb13u8_amd64.deb 9a41802a622734fce16c1cc69f3e362baa09668f 1349952 nginx-dbgsym_1.26.3-3+deb13u8_amd64.deb 8b534f2c796e5c11e872d6ba9120e1a31f4e2926 84788 nginx-extras_1.26.3-3+deb13u8_amd64.deb b4642b35568f307f0f95e3d5e0a2183920eb93df 14256 nginx_1.26.3-3+deb13u8_amd64-buildd.buildinfo 9d0ec6df1198961d5890cea423bf168ee56cf982 612736 nginx_1.26.3-3+deb13u8_amd64.deb Checksums-Sha256: a273b830d5e147630ef673179d539ef31510f6d6644f3e62c887e69ae8fd1bdf 38100 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_amd64.deb 115cd8580ab160a4215fe3d5252af3b24160a624e6fcada72a895a213c6e326d 89356 libnginx-mod-http-geoip_1.26.3-3+deb13u8_amd64.deb 9bd009162549889293b25965548e3ac9ff187057cb99377625b71107ef1c6092 46404 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_amd64.deb 739ea1292541ebe165d4a6fa976bb9d7477ef1b1441478205b2cbb8948abdf3a 93096 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_amd64.deb 7d07c8200d81759b7370dc2ac09272e09f240708acc36e6abc302f41da333cd0 109640 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_amd64.deb 0704cae9fe3674df86bd56b8420b974b391fb2cf3c82423e785b063446a897d7 101576 libnginx-mod-http-perl_1.26.3-3+deb13u8_amd64.deb f6e6f7b6f39cf435370e9ec17cf0c1682b918d3febfc505459e0468d1878dac6 54408 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_amd64.deb 34521f64db33624578fe2bd7795b92df6b1e33bdd09d607c206c403d22b0fbdd 91576 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_amd64.deb 851ab86134ae1c7d2e149757781e1b5da3e93d6aa30826f0009007fa739fc49d 105132 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_amd64.deb 347214e98c2bda01c8139bb21e9c5986dced3ef2d4bfbbcb6a4e45f3b56c6fa2 123460 libnginx-mod-mail_1.26.3-3+deb13u8_amd64.deb 926a946a6afd916264872cfa8b3d874d54d6740771543901218e7ae4e9358f01 188320 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_amd64.deb 511dc4b788f77001e9b6575fe55501d7f9e07c6747136b52f4bbf18654123b4e 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_amd64.deb a29bb465daa1acb6bdfffd2f6b91aff5f353619a4c133af1296084c0b186de9e 88548 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_amd64.deb 796780ca4a8d4c3481349df682daa546ec785006863b7eae1fd0eb333c186ded 153940 libnginx-mod-stream_1.26.3-3+deb13u8_amd64.deb 57a9efeed6fb35e70a3b36286041ac1c9cf10bbd0e6e803b49e3240d564e3020 1349952 nginx-dbgsym_1.26.3-3+deb13u8_amd64.deb ffb927fdab365cde6d93ac140c733ee991afb726df746b291b9443a6b9e9359e 84788 nginx-extras_1.26.3-3+deb13u8_amd64.deb ccd717c2675f77d60992a9751424b7a3ca9e5425ff5b2b19ebbea8cf5a5bf0d4 14256 nginx_1.26.3-3+deb13u8_amd64-buildd.buildinfo 4c9b5f9b78874298e057a32b3854c21eef3cf2b6c6855b028b6f28c1774c9b3b 612736 nginx_1.26.3-3+deb13u8_amd64.deb Files: 4e9397efe8e0784cc40fec306c185f09 38100 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_amd64.deb f8ffc6ca2c7cd3bfd5ad536dfa0bef87 89356 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u8_amd64.deb 0957231c3b214489c2543428625d874f 46404 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_amd64.deb e6f633b969e8b1964b6d4efb930ab1fb 93096 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u8_amd64.deb 544fd8f8b11feefef2a224ea2a9972cf 109640 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_amd64.deb b8cbdb80a80ebb88a2142ffcff13dcc1 101576 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u8_amd64.deb 065c622f0bb8012613bb2f40463bc6be 54408 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_amd64.deb 36d94df063742553a33be70139dd4781 91576 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_amd64.deb 0ab548b518e2d0797cc5537670e1071c 105132 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_amd64.deb 1dd81c8fbf9bb28cfcff309d003daa24 123460 httpd optional libnginx-mod-mail_1.26.3-3+deb13u8_amd64.deb 8f0f9befd0ec17a399c436faab551b74 188320 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_amd64.deb 22c5ce9ba866aedcb9e3c58a4cb1dded 24024 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_amd64.deb a2a8a22a2e6877cbb4e8e0c3d56a0400 88548 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u8_amd64.deb 379d673f0a1fc07d4e6f91a763e59578 153940 httpd optional libnginx-mod-stream_1.26.3-3+deb13u8_amd64.deb ee7eab1267e7fb44d899fec59d3c8bc3 1349952 debug optional nginx-dbgsym_1.26.3-3+deb13u8_amd64.deb a32ece3a31bd220049f562c4774d654f 84788 httpd optional nginx-extras_1.26.3-3+deb13u8_amd64.deb 1b2c8f839a6bddb831ceeccab6492adf 14256 httpd optional nginx_1.26.3-3+deb13u8_amd64-buildd.buildinfo 3e958565c2bef0616e2f094dceade421 612736 httpd optional nginx_1.26.3-3+deb13u8_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmqkFMwACgkQN8Ugyu9d QiSeiRAAp4XlRGFmVqQ3jSPcby5SLnH81wSgHAY6sgUoECzd8BEyPb+9sbLVLB7N llhConeb6y2vzTeS2LiJEGkcPyt/yxkM80c5InL4fmUE2lCLF43jd//U3j4dhMl3 093SIN6dTPXq24xcCw3Nh0VLb78WPrRMGDZcltD3P3xHCUjqE3jsASKG3QxQFOp5 4fpdkh4mmjjd9qOpScjP9x6m6E++iKSyp86Rk4S4F1c23G6WnLkmeUvB3dn9CfjL 3W92PqwQQfQeGpwDkD+xDiVhu3YpP1Cm1pIqn+n9pbrf3H8/uzrnGVu2zLc58dIB Cjqw1meb0VEZrW1iL32gjA/U5nn67GJFTUt/CD1oM3w7iIeZ6XVNvlBqSXieiTjn hEt9FtzrUeftQmlJwV1IyblzxzmI8B3baE/5eWRKCZyhok9tQ+NOAKv8ylKERnKU AY2J/xIR74/2u1YJNLslnR/pIGOeepEnmecRmw4x0R5gkdWYTgJjyNnK1foX4daH ULEOraxllM3KmvQNoLCsrh7nQojeeXWeyLAIeVsztA6JyJId1xSWbsRLqDnF4lK1 fs2SgHYBBKy+5J/UEnju6COPGZ+aND7QJLBcmZvm+AcnA/O9wmxvXsy/zdJbf+6O vv4ChxadBIF0qAAZwRN5D3TuzB8gDioidMk2tvJgtofzn7I8jZI= =hLBs -----END PGP SIGNATURE-----