-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 22 Apr 2026 20:15:43 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: arm64 Version: 1.22.1-9+deb12u6 Distribution: bookworm Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u6) bookworm; urgency=medium . * d/conf/*_params: use "$host" instead of "$http_host" * "$http_host" forwards the Host header exactly as supplied by the client and may not match the effective request target (e.g. absolute-form requests with a conflicting Host header) this can expose inconsistent or attacker-controlled host values to backend applications (uwsgi, fastcgi, scgi, proxy) * switch to "$host" as a safer, normalized alternative * note: this changes behaviour, as "$host" does not preserve the client-supplied port; deployments relying on "$http_host" including a port number may be affected * it is workaround for Debian bug #1126960 for stable/oldstable release Checksums-Sha1: 98098072c42134d1f5873ed77b4bc35a3b4040ef 36832 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_arm64.deb e9ea8b482458d155ad6fd16ed415b8e3a86d8e68 85272 libnginx-mod-http-geoip_1.22.1-9+deb12u6_arm64.deb 50aedde4d81b4813b70c75563cfaed0c7a7dd9e9 43772 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_arm64.deb ea36bfb41bbad01d048bf6df7f38706cc3fe4d53 88644 libnginx-mod-http-image-filter_1.22.1-9+deb12u6_arm64.deb 66a26b70da46f04fba792f552ab15d5d983989d4 98552 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_arm64.deb 15d42d58c83f859d04234e83b213e1a8c1b8d17f 96388 libnginx-mod-http-perl_1.22.1-9+deb12u6_arm64.deb 20960716f2ad4d790a9a4aa9ab8ca6ebf7d28508 53208 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_arm64.deb e0556299a6fbedec39634e7f0ade0c4f8a372e77 87296 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_arm64.deb e94343283f53441caf2c724aef7a4318cd8a6325 104560 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_arm64.deb 517d670f0e20d53669cdc0546e20de193518425c 117068 libnginx-mod-mail_1.22.1-9+deb12u6_arm64.deb 14c9b3d2a2c5a4e00b597924d4a282b383f2c824 168580 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_arm64.deb 51ab7d0d16d6a4e3831d301a9cef735487f5f499 22600 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_arm64.deb 96469d007dc5bb3b853251fa58cf51233c62f957 84456 libnginx-mod-stream-geoip_1.22.1-9+deb12u6_arm64.deb 1eb56f6edc87be90389e5ecdfefea37e71036776 140284 libnginx-mod-stream_1.22.1-9+deb12u6_arm64.deb 9a788b7af48f80470f5964f61c9edb47d2048210 1093420 nginx-dbgsym_1.22.1-9+deb12u6_arm64.deb 7667b8dd41f1aae12aabdcd70edc95f3f12eef10 80812 nginx-extras_1.22.1-9+deb12u6_arm64.deb ecedf8715c9e217c4d2ddb83d98e1d5b94947a2a 14271 nginx_1.22.1-9+deb12u6_arm64-buildd.buildinfo 434cb18f8e637ee96d9f0cef401b3039c1305e1c 495512 nginx_1.22.1-9+deb12u6_arm64.deb Checksums-Sha256: 63eb1c931eb8a976d5a83b4ce1fe6eef8eadc1e76ebe747714da66708711e95b 36832 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_arm64.deb df6ca26413fba204d102b084ec458761c10e6927d42d467c7bb4d0b78d634cc8 85272 libnginx-mod-http-geoip_1.22.1-9+deb12u6_arm64.deb 4d591082d1ff93782f234118903d5b7cb6ee79492e378c9a6abb51d3c443e982 43772 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_arm64.deb 14ecc66398077b6791032fff53d8801f5445d7f7f25cd23967beab08572d6db0 88644 libnginx-mod-http-image-filter_1.22.1-9+deb12u6_arm64.deb 5af7bfb5c63ae29befcd7fc60e68833abc3cc901d511cc00c5b28f419ce95b51 98552 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_arm64.deb 51bc92b31317df0dcb81c0dc43d1727899ad7605d5fdbf7c9d14ebf6114a81cf 96388 libnginx-mod-http-perl_1.22.1-9+deb12u6_arm64.deb 48ac3174e31f6aa07a0b7ea0eb51282a823944305a3c61ca84ca559956883d9e 53208 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_arm64.deb ffcbaf92bc2bfc2ddd1be2f6fe2a0d711dfb3ca60fc6f053a0801afd7e72e89c 87296 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_arm64.deb 7e49008c8ed91425ce3373de45ea82e3e580abce9ccde20f60f7fe5a15670ba0 104560 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_arm64.deb 5d9b4ac57b9aeb1b976404d04bd5c819ebc2014489a2380a8703edc313c74aa4 117068 libnginx-mod-mail_1.22.1-9+deb12u6_arm64.deb 5f72731af6c2003cc80d0ea92c7459eb973e7b2bb7ea94ddcade520eacdba864 168580 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_arm64.deb 4e53501cd006d5badf7318ad0548cba451711c9ed1af7a945ea29c551033811e 22600 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_arm64.deb 02c10ac21733c02ca73db9ce5013bf30fa76ebd53de35c3c4a2db94d6c84449c 84456 libnginx-mod-stream-geoip_1.22.1-9+deb12u6_arm64.deb 365dd8cd033d10a0f421ac87ad5e8711428ee8b0d3dd053617232755a30350bc 140284 libnginx-mod-stream_1.22.1-9+deb12u6_arm64.deb 04e399f6c6dc1ed65921db6130ac613bebf4b048c83473992f54a150a81a4516 1093420 nginx-dbgsym_1.22.1-9+deb12u6_arm64.deb 9858dfd4a8242e0d153dbeba21fe56ba120a862bbc9e8d1d8bab3b122166a52f 80812 nginx-extras_1.22.1-9+deb12u6_arm64.deb 797aecf058beab11a15cad5121cd0a9a295bab8340d611034204fcf052712ea2 14271 nginx_1.22.1-9+deb12u6_arm64-buildd.buildinfo 21f9f00871ba6186c2f772b97fd8f1d20f7a8a4091ed1d67ac9d970b23fba0f8 495512 nginx_1.22.1-9+deb12u6_arm64.deb Files: 3bec9327f8663a2d7ac3250b4068e931 36832 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_arm64.deb 8b86eb1d53bb89d10035c635a2726374 85272 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u6_arm64.deb bd5fd752df9d432b69f5cef5607534f9 43772 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_arm64.deb aba0ea793cb339a222aee84cf005112c 88644 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u6_arm64.deb 9fd65496515541317c65b3b7cf4248d5 98552 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_arm64.deb 66fe4022733962caea92ee3830b9620b 96388 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u6_arm64.deb cc1e328890f2c7cf95a7fd9e5f38b491 53208 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_arm64.deb 7752927207a80797bbe1b1df0b233a9d 87296 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_arm64.deb e1515acab2d3e1e006d61386f30e9225 104560 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_arm64.deb 6e5f94a30224c1aa5f6d9d04f41faab0 117068 httpd optional libnginx-mod-mail_1.22.1-9+deb12u6_arm64.deb 37d0f0585eefd80bb9e40e3b2f9618ff 168580 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_arm64.deb 57461df6a48bda6bbe4c69ec525f8ebd 22600 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_arm64.deb 3c62956b0d091452a2f1240aa4cf939b 84456 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u6_arm64.deb c920574b5a4a9a7ec27e6adc39ef9efa 140284 httpd optional libnginx-mod-stream_1.22.1-9+deb12u6_arm64.deb bdd44bb83dd35bb9b5992fdad13031c8 1093420 debug optional nginx-dbgsym_1.22.1-9+deb12u6_arm64.deb 707df11d0347d970a3aa1acabf8a2bfe 80812 httpd optional nginx-extras_1.22.1-9+deb12u6_arm64.deb 255f0860fffc0dfae802d79d1fac494e 14271 httpd optional nginx_1.22.1-9+deb12u6_arm64-buildd.buildinfo ad0f15d377f52fb784c61f0272cc070c 495512 httpd optional nginx_1.22.1-9+deb12u6_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmn5g4AACgkQxqCFmsOW gobDrw//UhJMIH5YgpTjXwHM+6bvJZPV2/rmU4KGZVttxkA1dQSDS/LIeouisiwT s98Wg13AyofACz4JMG6iQXucpQ8BRZosAEYBKAs+w1E8AaxiZYT2bxtTt4oVN6xH R2gVEmzIeVXVK3AaVp/2eRDvtII96SUplmBjdJfdg9qDi3qaTqB5YUcNLTtdJcyL KZ30Ydwt8CHe/V2Ob3YbSGUXX2CtMc/iWyLQVshxEFrqEg56TCS0KB3Au6Nq1N09 RVS/xL6xFViKUuX99YjKyxAvVP9iZe4EVvY0YWuOEhKRPsBZMAJZHCk55CHfuOuD GntBPghEqpHiZiz7SttADn6VPnvL0J+QfL+tcANDcHFgbnalIustWt2RXg3ZvROt fvSKGmMycKtN4MtckRitBwm8nW11SQmttXb5N7/lU7PTRkUXBmCMqb0fgzYAHXcT ydfRjCFgXVHnQt+1qzfEi4IHfSG2vE06M4/OmcCUQ+jW5dhE17vT/4iuWzimmpwJ OgYD7W9r/Lk8hTNZZVmNIvpTnhc7+V+rRO083fJu+yLiz12CdtanLlLev13mv3vW 1W4gkZWIDCLi7mSE5qH3KQv7ThFIGHIlAoaa/V4xt25fPIArgVUbNUgcdfaSF20f CzzTZCdZfSikR108jwAPCJw/pXdo6Xu4y2QPEgJGMOC/BciTA50= =v6u9 -----END PGP SIGNATURE-----