-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Sep 2026 17:02:15 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: riscv64 Version: 1.26.3-3+deb13u8 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-02) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u8) trixie-security; urgency=medium . * d/t/abicheck add, detect unintended API changes in the nginx-dev package by comparing header files with previous version * d/p/CVE-2026-56434.patch add, backport fix for use-after-free when using ngx_http_ssi_module (CVE-2026-56434) * d/p/CVE-2026-60005.patch add, backport fix for memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005) * d/p/CVE-2026-42533.patch add, backport fix for buffer overflow vulnerability when using map with regex (CVE-2026-42533) A big thanks to Aron Xu for preparing the patch. Checksums-Sha1: 48856cdc73622e91de6c9948868d0daf914469a2 38008 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_riscv64.deb 87aa47d0fb928b41aac419450f341e069b724f8b 89504 libnginx-mod-http-geoip_1.26.3-3+deb13u8_riscv64.deb b77de5d48863cbf80e292e5dc746e8fd0cf1e38b 45044 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_riscv64.deb 2914119548a1b2fb3c36d1fc0e3f0a087df81645 93052 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_riscv64.deb 0e327259818647d35c527506019e0449e541fce2 106884 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_riscv64.deb 25cc9077a593a5bec01c50f0ae2c8e36a3c29eab 101452 libnginx-mod-http-perl_1.26.3-3+deb13u8_riscv64.deb f110d638381f3c81470a6c88731e10ace3bec1b6 53980 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_riscv64.deb ae53dcc8099334ea498976698263a076ff42df81 91536 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_riscv64.deb bf7cf93ce4d569d0514077aab8cc3d2465894155 103768 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_riscv64.deb c2100e52393ba2570c719e660b53c107be146e39 124824 libnginx-mod-mail_1.26.3-3+deb13u8_riscv64.deb 15c3019cb50519fd6f06167a43b20dabbc2f74c2 185888 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_riscv64.deb c4aea304616c2d1cf8179d4295e2ccc1b2e7174a 24020 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_riscv64.deb d9649437a586041a42dbd2dea6330cd193def675 88804 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_riscv64.deb 9f104c420b9f9e501922bf5239d83ea2ba4e31bd 156824 libnginx-mod-stream_1.26.3-3+deb13u8_riscv64.deb 69b9b1c1768747470e154fc4776c7d2e99a4f4f3 1321772 nginx-dbgsym_1.26.3-3+deb13u8_riscv64.deb 646e002e641448e8cedcaca4ca92462c1441a817 84784 nginx-extras_1.26.3-3+deb13u8_riscv64.deb 89f415baeccc884d0cce343fa05e9b557825b89c 14290 nginx_1.26.3-3+deb13u8_riscv64-buildd.buildinfo 76600c7a5a8f3dbc3715f7f14cb4ac82502e0542 633076 nginx_1.26.3-3+deb13u8_riscv64.deb Checksums-Sha256: 8d95b3fb424607fc9ac6a2ccbbbfaf5f358474deff72627f212880ccab00b195 38008 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_riscv64.deb 6922ae0bcda9b4a61ea703b968c69017611ded5cbc5e1702f0b9a7e979bf257a 89504 libnginx-mod-http-geoip_1.26.3-3+deb13u8_riscv64.deb e86b1e8d9a5112b3b99c22a237c4c5c565d0099b19829c80c0e775ee19c2efca 45044 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_riscv64.deb 5fd30d68c5893222e2d2421fa3bf3116556bd7aeedbd07b2203d42898dcd059c 93052 libnginx-mod-http-image-filter_1.26.3-3+deb13u8_riscv64.deb c2dd24c889ea365278f34c2f04bcb95ede34cfcfd2aac436d8665c189fbe7fb2 106884 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_riscv64.deb f94aaef069ba5e254f6e59911b5e4ef74d7e397880694dfb12c1f29e649d5587 101452 libnginx-mod-http-perl_1.26.3-3+deb13u8_riscv64.deb 7390bac3fac70f017f3085532379f6307feef0ccdc2f2a7f8edeb096d0bb2af9 53980 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_riscv64.deb 3f68062174ad0216f1fa6842a76fb5f489bed560ba35f98c3c0c7ec55b55c414 91536 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_riscv64.deb 7d51aea6d293c765151d131c617ae9a9a71203de7400e602607c8cbc306e5899 103768 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_riscv64.deb 6e11a79446f68e4b569c4af012ace3352cc3bc5d5e4545a5a938093aa6b8b676 124824 libnginx-mod-mail_1.26.3-3+deb13u8_riscv64.deb 04aef9a020968f508255aeb84b1dac88d76da7b9e8102a75daaeecae512e0926 185888 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_riscv64.deb 2c3ee147c913cf4a2437424efc050d152850404a0fbe8282103ba7287c75b22f 24020 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_riscv64.deb 31de9382e0a8e36716acda40f65f575de677c4ae72a53504f8137635a8545df2 88804 libnginx-mod-stream-geoip_1.26.3-3+deb13u8_riscv64.deb 75a71dd68aacb472eeacf2d4cf9b5ffd09d518d56a18c8aa26fa5b5b70f0a82a 156824 libnginx-mod-stream_1.26.3-3+deb13u8_riscv64.deb 6e2de0eb71084628d7d3ee4a5cf96eefb23b4b611651d28f6915ec306926a145 1321772 nginx-dbgsym_1.26.3-3+deb13u8_riscv64.deb fb9583dfed6535e336e76fe2093a33c70db2b78eb686a7cbc892f642c47c8bc5 84784 nginx-extras_1.26.3-3+deb13u8_riscv64.deb 6e98d2a6f680993742a8f17e5fb16e4b35a56d978e5d1a73c3c69dfd3a219aa6 14290 nginx_1.26.3-3+deb13u8_riscv64-buildd.buildinfo 86157bb057dbae088a8deb870c495fae59f9c20dd534cdfff5c16f91c8455563 633076 nginx_1.26.3-3+deb13u8_riscv64.deb Files: 8f3482f31ac28531c9afae283b95935c 38008 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u8_riscv64.deb 4bc38b67e4a7f02c05a954a2e51a84c5 89504 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u8_riscv64.deb 1ad4cfd11dacef1c4441dec88db886c1 45044 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u8_riscv64.deb 3410128cf8020a627621b8a520ae33d3 93052 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u8_riscv64.deb baa6e0c4458fb9b8f9f3e61840aa8581 106884 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u8_riscv64.deb f3c42c11e3250605397034a56a8239a7 101452 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u8_riscv64.deb 73f5faab35d866a4a9b37e2725aab350 53980 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u8_riscv64.deb 0a405a340228c6b7943efebe21fdb069 91536 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u8_riscv64.deb fbba14440b8e561cd1ad7cc19af1133f 103768 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u8_riscv64.deb 6f0c05aee8d08faed5213af045c0dd40 124824 httpd optional libnginx-mod-mail_1.26.3-3+deb13u8_riscv64.deb bcacf2b00736cc15df0ac1f11ad89198 185888 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u8_riscv64.deb 522f884ea7e0b26f51cad6c12bbfe812 24020 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u8_riscv64.deb 74c27b19455fa70b81c128503a53ea73 88804 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u8_riscv64.deb 655227db7f503ad506914b541882e49b 156824 httpd optional libnginx-mod-stream_1.26.3-3+deb13u8_riscv64.deb eb4b642d80f0b9402edf158ba82501c2 1321772 debug optional nginx-dbgsym_1.26.3-3+deb13u8_riscv64.deb cde21644a7bb0b944ff6bbca71d7da2d 84784 httpd optional nginx-extras_1.26.3-3+deb13u8_riscv64.deb 9f5605d410ced368a32bc56fca10c130 14290 httpd optional nginx_1.26.3-3+deb13u8_riscv64-buildd.buildinfo 41b4734ece3f10b22821fc8842cc3f9e 633076 httpd optional nginx_1.26.3-3+deb13u8_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmqkG74ACgkQ7SlJcp2g 6OKINg/+PZII2f0MtrbPIEMjUkFrqpmKWU6Q5mwvfAP3STVMgkoPbgNOeI0xMJl9 RQrI5r2pFUbxeL15BaZN/Ci6l7BxJOkg6KB0H8MWuf8QEzdjJpJPR73rK/CWiktg Rx9iEXTDaDM2g6XtkQkkBCIrmeX967ZoKAsHKhmbZK8QXAY/X5YRJ8p7VT/uN4+g V45RKPllK1DS5ySO7VigzY+fjM+xwyn8hYP1VsiXYRkXvYIwDQ8m/2Bu9uOWVnzy ymHpxEEVvEMhZopqoBNRqnz0xm3zG+bkw9ADwxws6b9iL7C3ZHccS0WNMmG0Wwri ySS6Fix1DDG1MaUnGgZ7omhs7j77a7oLofmu68eb0tKTENX3JFkmP/dDM2FuT4KM RUlOdpzb56AWW0cGChYkZ1+2tZKun6LEQxxcNs0+7DteEbc5EtRi7fqdmnatr7qp WXZN86XNBZa1Uc5Ra3EYTWdACCjF4IDl5li2Aaw4ittzlCZ2kpWEMf2ciOE2IOC+ 88odG3NAoY5+9OCEbBeDPbziK15OumyWmeyi3Bh/fIwPs8iTeL/fIwj5+sj9wRg1 ZuvsN4ly12E1ghMnmMtat8j300BaoVBZtyk6g6eQud8Ze6zJHhbowDDk78XYFPHD LXMfi62Zj2eu4z3JXGwpRMAMDTpaSYbQqPJmya9nHQYabLGfH0s= =Bnks -----END PGP SIGNATURE-----