-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 May 2026 14:13:33 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: amd64 Version: 1.26.3-3+deb13u5 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u5) trixie-security; urgency=medium . * backport changes from upstream nginx, HTTP/3 address spoofing (CVE-2026-40460), buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP (CVE-2026-40701), buffer overread in the ngx_http_charset_module (CVE-2026-42934) * d/p/CVE-2026-40460.patch add * d/p/CVE-2026-42945.patch add * d/p/CVE-2026-42946.patch add * d/p/CVE-2026-40701.patch add * d/p/CVE-2026-42934.patch add Checksums-Sha1: 99ea97caf8875a80a696b69df2c3e45cb9c936d3 38096 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_amd64.deb 221ba8a5d6d0269b18f3a5d0192da5f5493a88f6 88700 libnginx-mod-http-geoip_1.26.3-3+deb13u5_amd64.deb 5bdcf3e8b58c947cc42d5c04645cb0d682ab80b5 46392 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_amd64.deb 5ed72fe17b4c5d44962311e4348bcd32fdbef060 92432 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_amd64.deb e661cd41e3749f8054e26969872b143177bc3621 109660 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_amd64.deb fc0d1b8b2649c0c40080c34d93d97c657007e9c4 100928 libnginx-mod-http-perl_1.26.3-3+deb13u5_amd64.deb 4bd0bbd8e61d93b46a77880512a68058b3c434ac 54404 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_amd64.deb d50aa9f8cb984f6aa097f2d1ee9b298d1e635aef 90900 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_amd64.deb a6f9bab3e3221082437959f1df3e2673e61000bc 105096 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_amd64.deb 20ccd913ca87e1fa07ccf4d81d8802a9cdddbab7 122760 libnginx-mod-mail_1.26.3-3+deb13u5_amd64.deb 5481e6e7336e517bf75547f3520cb43546b14d52 185804 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_amd64.deb 5fdeeda1be5a3e7714e9cea1cf3c95e6722dcb8c 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_amd64.deb 2c14e97fd71de7fbeb194efd1d15685d909bbb13 87876 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_amd64.deb afb4088c39020cf9484ff3557910ca681fcab63c 152804 libnginx-mod-stream_1.26.3-3+deb13u5_amd64.deb 043c4b080a10a6032da1607bd81ae9d8037039f1 1341660 nginx-dbgsym_1.26.3-3+deb13u5_amd64.deb 3039e4043e4120a015e0e9383517ea61069b7699 84120 nginx-extras_1.26.3-3+deb13u5_amd64.deb 8856e5aa2c637ca7b0ccf0032937608ad7127553 13925 nginx_1.26.3-3+deb13u5_amd64-buildd.buildinfo 52f7499d985416fee0fc798905a45fa756ca66a4 610008 nginx_1.26.3-3+deb13u5_amd64.deb Checksums-Sha256: efc93b103c4088a8b4ce9fa8837b0ab7510eae8e4d33db53c3cb06419dbada37 38096 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_amd64.deb d933b86ce4e6c8421efa322d512cde2af39f41a034b8e6a99e9c38b9d8711781 88700 libnginx-mod-http-geoip_1.26.3-3+deb13u5_amd64.deb 782f1ba1ba7ee7706d4d50972fd5b41d2fb668be0d6f77ad0fc591dd5d16a9ea 46392 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_amd64.deb f323aa124be2595af78bf616eb83d09a8b0dfb7f0dd3d12037c9e6f826c9c13e 92432 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_amd64.deb f0cf5be790ed83dafff17ed711239a868abd9bc990d4da1ea6103fe6553b52fc 109660 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_amd64.deb 076b4b7972beb6c4c3cd74c5a3c9e83713f3936b0d40ae46de1de1d2976c96a7 100928 libnginx-mod-http-perl_1.26.3-3+deb13u5_amd64.deb 5e3ec61d15346312ddb88a2670e3a3ead6a3a25364bf5d3dce8f244016f6d42f 54404 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_amd64.deb d90f25272de471335c5e037cbaa73392fd3276060b58598c4d6582cbecc9d4dd 90900 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_amd64.deb 389164d31cb908ff2b36c3168cbc3a1ba2653d978613632fc8e25b1c114460b2 105096 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_amd64.deb 52f6bd45881f9e303cd07b5280cb8ef3bfd50883efade06c8bf4b1f104a7e5e2 122760 libnginx-mod-mail_1.26.3-3+deb13u5_amd64.deb f6c74365a25e224f609cb8b75dec197e98dbb0f73fdf61146c3f845467f8ee92 185804 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_amd64.deb 71b71dad10faa53e18c25b88b7961dd586bc18f907ac716c1ca791e0a66fce64 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_amd64.deb a0b312905a115042b48fc7e2f5883b2f84093de2fee632711430e75d3a38c9eb 87876 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_amd64.deb 0e0abff3fc94f437a595d62e25ef6685dd05064bad0a3062b5c482bfe8eda6ab 152804 libnginx-mod-stream_1.26.3-3+deb13u5_amd64.deb d71c9b136132c406bb64d618e637604c3e2fbf8125537d4a656b228bb9fae8cc 1341660 nginx-dbgsym_1.26.3-3+deb13u5_amd64.deb c45e8088689f96187b04f6a3b2a90e1594746abf4144932d5cd00cece2e6ed82 84120 nginx-extras_1.26.3-3+deb13u5_amd64.deb 82a29b8d0ad35e4a27de63d93a2354fd4534923530b623f25801a5d48b57f360 13925 nginx_1.26.3-3+deb13u5_amd64-buildd.buildinfo 09e5d4980744c37110682fb57d9e8a275c0c8d679e63c1d5c569e496361add10 610008 nginx_1.26.3-3+deb13u5_amd64.deb Files: 197eb05fb4de2c0235133eade29f2a11 38096 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_amd64.deb 706b612f3a9b18a14ef373f98c7d9090 88700 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u5_amd64.deb 4c35dd7b600d0403d28d940365c5c0b5 46392 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_amd64.deb 53300cb096327e06fde55b82d0e9c628 92432 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u5_amd64.deb d300636b209a337cc5d1593885303fb8 109660 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_amd64.deb 08960b5070367605a0211ce34aafb112 100928 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u5_amd64.deb d99b517454d98477568f506f71a96a5e 54404 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_amd64.deb a3a437120aa3bf56915a675cb71a4dfb 90900 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_amd64.deb a7f98930cef9d9026036f2aa93a49b4a 105096 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_amd64.deb 33927bc18547251270c3a7feb8b9e352 122760 httpd optional libnginx-mod-mail_1.26.3-3+deb13u5_amd64.deb 5919254d3a191779fe6dcca023820f1c 185804 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_amd64.deb 2d4c7834503d9d44dc934627dc0c46e4 24024 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_amd64.deb 7556c077116086823ad035f49aa63c83 87876 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u5_amd64.deb 21a43a5c87e3ca2e136c236930773119 152804 httpd optional libnginx-mod-stream_1.26.3-3+deb13u5_amd64.deb ee6e7e7c4c3352e9293c4c332c2e02b5 1341660 debug optional nginx-dbgsym_1.26.3-3+deb13u5_amd64.deb 214cc5c5f7ae02d1f8ca9998766bdd0c 84120 httpd optional nginx-extras_1.26.3-3+deb13u5_amd64.deb 13eb964a7d84b626443d3045aec1391c 13925 httpd optional nginx_1.26.3-3+deb13u5_amd64-buildd.buildinfo b45370741d58594e8dff5d30cc8592c4 610008 httpd optional nginx_1.26.3-3+deb13u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmoIDAYACgkQPkCWRKsh 20coXxAAhnKBKCJubXLbUB9YPO7M/t5yoRJcNFdQLzCD7P4TjoGaKOwZKDrGD0Bo ohAXhRzyivL0WSBtOZNV1CQR0UYpcYqRX5mVDtZFMkLisy2Dc8VsNdtaJCkPs/x1 IRGDhu1mYSBHBUHRU6Ks/tAxiYppcISgr6L6bek9EcLVxAzn3m15wPoSscyR5fG+ gsK4hwIGMQGeuXhclZzszDzhZeVzQBybsgE7FVSEgJi8qOT2jS7S0Ns7oQWHV5RZ XFoC31JgHS+f95dcr5CSYuwWmYOmNb5O/rMB/kMXC2tXYaLd0yrnkVOIDZWi+e6E 5EMvltaH2WoN5m7JuR+jItZXHbIx6UgdH+O24BhdL0qtppE9f1JPUyubHS6sWoSj FDsc2wwj9LQx+dTnUnlbauEFvRbCKk43s9y/OXODFGWKB0NH6jhTsdRsAMjmzv1q yDCaI3FMEl1jc0pgw2U8+lj/jVqme7jaNAKkZ9piQnpATDSzX9l2S0bZWSFo7x7/ QlAGkUJ0jGgd6WIn3SSytGnslb/rxaA/8gVHGRswjUXpOIwBfCvP3djryJSv5lit pqqLNkBmOWfbUS/CuqXUsHYk9jKLHW0xmiNY7mk5nXeHRhAT6+/6/MuLJfgqYcov 4z7SOBBVN0Eo2qsRZI2up7GBd2FojjLI2bxCBx1VTlGXrNg7Sfo= =Q3zr -----END PGP SIGNATURE-----