-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Sep 2026 17:02:15 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armhf Version: 1.26.3-3+deb13u8 Distribution: trixie-security Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u8) trixie-security; urgency=medium . * d/t/abicheck add, detect unintended API changes in the nginx-dev package by comparing header files with previous version * d/p/CVE-2026-56434.patch add, backport fix for use-after-free when using ngx_http_ssi_module (CVE-2026-56434) * d/p/CVE-2026-60005.patch add, backport fix for memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005) * d/p/CVE-2026-42533.patch add, backport fix for buffer overflow vulnerability when using map with regex (CVE-2026-42533) A big thanks to Aron Xu for preparing the patch. Checksums-Sha1: 3b844a20dc9778dd7d5c64f43a9953f1603b217f 38396 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_armhf.deb e2c78025af7c0c7570f4f3feb3eb26ddb97f8b75 88756 libnginx-mod-http-geoip_1.26.3-3+deb13u8_armhf.deb fe93c25a3e4c46f0616055b5d71e50f42bc4a5da 45828 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_armhf.deb 16da935530440abc7b823dfc3637c753bc10b327 92020 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_armhf.deb 7cd4f738e31a4ae3cf4e5377d5bb16fa89e062f1 108372 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_armhf.deb 197603a0dd7ec275e17eaa36b076c9605bb0dcd6 99188 libnginx-mod-http-perl_1.26.3-3+deb13u8_armhf.deb cba4af8f8c651b45acd5ede61b600f8d789bb993 54488 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_armhf.deb 328187866f62eac5d439a324a1acc80410cfdb61 90644 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_armhf.deb fab7b7c6ff1a0498a52cd627a7d282f370260476 110768 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_armhf.deb b88a08b045c47dc91a5e3faf72effd66be639655 118884 libnginx-mod-mail_1.26.3-3+deb13u8_armhf.deb bbc2dae39828d8faf7156b192d4ff17e0a6bf7e5 193148 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_armhf.deb 0ef47480ec336df460b931ba2122b0293d1560ed 24592 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_armhf.deb b8c78f6d978e52494b87a460e8204f38698e3a18 88044 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_armhf.deb 631e222b718b8bf01569dcf395bef4f106b69ded 144036 libnginx-mod-stream_1.26.3-3+deb13u8_armhf.deb e7d5e11e63baaa16071c633cfd5559ddf6465fa4 1350556 nginx-dbgsym_1.26.3-3+deb13u8_armhf.deb 70db028564a18db89ef333a5885a1f5c1587a226 84788 nginx-extras_1.26.3-3+deb13u8_armhf.deb 17757e41bcc3324ef57e788e04efe220b06ac025 14119 nginx_1.26.3-3+deb13u8_armhf-buildd.buildinfo 55ca9e6ed025e57c0a8cd6ec2bac9a67a9ff9d29 551860 nginx_1.26.3-3+deb13u8_armhf.deb Checksums-Sha256: 47ab5a934bd450ed4af6c7c90dccdcfa9f27327b9aa33d7fb800606746255594 38396 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_armhf.deb c919e7a5f262a37636290f7bb0b4963b64c28462c6ff46c00cf91290e4c23143 88756 libnginx-mod-http-geoip_1.26.3-3+deb13u8_armhf.deb bcae32cb597bfc9537182122b1551520c6c8c026ab6da5a37edb8106992f3a79 45828 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_armhf.deb 528498d3d6281cc7fae65ac949a49995c9df09803c3075dd2e833bf01631732c 92020 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_armhf.deb faef5c875dff88222c111557e1903b840ab057bd1a56db2b365fb0b0e94efa34 108372 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_armhf.deb 288464bd8b1e948198ff27c7c662557ddd28e3fb57c9aa9383f2f57d1bfdc497 99188 libnginx-mod-http-perl_1.26.3-3+deb13u8_armhf.deb f8708d954f5449d169d75eb98fae924a3de29686f67e34e7fa5ef8c73ec7dde0 54488 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_armhf.deb 38e7573f7316059e9ddcb70d1e68d90d32af560383a1c7214196aed4441b1434 90644 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_armhf.deb ee6e2a44767495af815d91da5a196b8ac2e76ae3d00ed3870d55ff99bd2f194c 110768 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_armhf.deb 00fd2f179145257c4291c62aeec7ea94e56f1fd34a956e3c8fe9eb76fc379619 118884 libnginx-mod-mail_1.26.3-3+deb13u8_armhf.deb 346f8305cebcd17118afd74f60e108622abe94ad2432029d4a5107d9160a4c79 193148 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_armhf.deb ef78295f0a7732a0705070b4abfd8b2b6c4ca457d0c5c595484c0a6dc306d890 24592 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_armhf.deb d1495b8efbdaeffe111641cd2570b21bbaa287b8a1ed66e9dc9559b8dd8f1063 88044 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_armhf.deb f50a7b5965cda5e720c1a0016150c62f04dbdd00357c832e85a14d1d78ddbbbb 144036 libnginx-mod-stream_1.26.3-3+deb13u8_armhf.deb bd5ca8c7ac1850cb7cba79f6a9bdba577d0305fe6218afaa92c0ca32443cd329 1350556 nginx-dbgsym_1.26.3-3+deb13u8_armhf.deb d8db71c9a4a5fefabe76e9bdec191025296f837d71b1e9fb2a342fb8b2537982 84788 nginx-extras_1.26.3-3+deb13u8_armhf.deb 5e2ccfe7d9beb144bb56531a2dabb5d984c085a05828e5a846178789d2e6d926 14119 nginx_1.26.3-3+deb13u8_armhf-buildd.buildinfo 6dda5c8e4ffce2216da1489b4c5a3295559b098f961f46ee46efbb999770562e 551860 nginx_1.26.3-3+deb13u8_armhf.deb Files: 9dfccb8ecc09f397caf4a5489c6f46ee 38396 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_armhf.deb e1ffd1dfcc9920dcc1e67b5db4a29a5f 88756 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u8_armhf.deb 47864aeee0f55961d25cd4c94df8d6d8 45828 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_armhf.deb a53846a25219ecda3f309acc3f0a34cb 92020 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u8_armhf.deb 3c978f58dc0ef2ed59f5f412050d00a4 108372 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_armhf.deb 3ba4813b1093a1562f3482553d0307b7 99188 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u8_armhf.deb 1b6456805cc5cd22c276e2af30a70a6f 54488 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_armhf.deb bf4e2b921106d7e4bb28d57526e1255a 90644 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_armhf.deb c5be13c1080290473050112bec8143e0 110768 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_armhf.deb 934c93a99933c3ab680e2c9aa97b869c 118884 httpd optional libnginx-mod-mail_1.26.3-3+deb13u8_armhf.deb 98c586f8cb98080fcf56f0819eb12497 193148 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_armhf.deb a4a870cfcabe52714e053e585ad7f3f6 24592 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_armhf.deb edd2418662f04b6e029c939dbd48e0b8 88044 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u8_armhf.deb 4c7360a701326e07d3d712d8e662c8fb 144036 httpd optional libnginx-mod-stream_1.26.3-3+deb13u8_armhf.deb 0ceb2ed6343d6eb4fa42895563b3d49b 1350556 debug optional nginx-dbgsym_1.26.3-3+deb13u8_armhf.deb 1fbee6eda72261ed23f8544e4216b8e6 84788 httpd optional nginx-extras_1.26.3-3+deb13u8_armhf.deb daa4ac3f4503a632722f96f4f02c1e5f 14119 httpd optional nginx_1.26.3-3+deb13u8_armhf-buildd.buildinfo 5d69450bce1e30043fd0180e1055a467 551860 httpd optional nginx_1.26.3-3+deb13u8_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmqkFIMACgkQutMAkCxK bL2pXA/+OWpz/3Z7TBCs1fuAeefY9ZVformDz4+1DWMgA9ZL2oO2b3vFiAuUf38b usvHhTg6BU7lcBOZiKPDNcsOW8JvtKOWbN/XZzeq0vsa/0T86hpIrdiDn5dZL5YU POU6GqTH85T84eYv0a+RluWQMxsd8kOYuBKkH79EQiIibR+GaakSHs1EJVeIdlMB AbJ8f2h5zIe+xPtuvFQ3qcI27GyXBJYXEkBxCMN9JkT7oY55pNWeKaJBcrH4V7oc dOmYUA7hYSChWXq71w1qW0uTlSS9mIss+Qah8XIQ74UGtENlTEKGrdIfAmOIUwst zip1gDxT+a8zwTSxvsa8YA3g9fZYy7zV3ptJRyKmzhO3THe4Ux6IMyFGzyAIMZjp oURIIhwKa3mUvWO9pv3bJ4BrqP4dpz0OzYZhoGUaP8YMEHmVLYJmDNQwP5CHyu1I EXn/2NSgvyFWpTlyvA7/dlfaYW3NFS7JHpfn666uxQiqU2FlGgWBSLZuHif4f8Ax NcOoysBJ353tuZUWWq/ogmKPQqr9RD1bI6HOg03mff820UNvG59attPEnVMM6dzB TPkaPQ2DaVgiUDbUGux0cXhWx8OumGkgfVRTLHZsgemx90iNtZ8pcNNCz3T4GvCm EElKaanwilgqgiXNc1Du6zvUukUUWY2akq/Em2BQivP3sy/RP9A= =Gh2S -----END PGP SIGNATURE-----