-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 22 Apr 2026 20:15:43 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: mipsel Version: 1.22.1-9+deb12u6 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u6) bookworm; urgency=medium . * d/conf/*_params: use "$host" instead of "$http_host" * "$http_host" forwards the Host header exactly as supplied by the client and may not match the effective request target (e.g. absolute-form requests with a conflicting Host header) this can expose inconsistent or attacker-controlled host values to backend applications (uwsgi, fastcgi, scgi, proxy) * switch to "$host" as a safer, normalized alternative * note: this changes behaviour, as "$host" does not preserve the client-supplied port; deployments relying on "$http_host" including a port number may be affected * it is workaround for Debian bug #1126960 for stable/oldstable release Checksums-Sha1: 55968a9f3206265343fe287431e8bc7ed1d6a177 37400 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_mipsel.deb a7c09ab2c05108d752c6316fcb1f59484b909513 85164 libnginx-mod-http-geoip_1.22.1-9+deb12u6_mipsel.deb f7dd702fb960f7b909e2f7c378060a04e2660139 44680 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_mipsel.deb 0197d27868f111b736133a49b8b672e60ffc134c 88160 libnginx-mod-http-image-filter_1.22.1-9+deb12u6_mipsel.deb 25bb883390e42e668178395c7c0ec1cac38b435a 99788 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_mipsel.deb 6e41d56e86d7a14f179f7073ee225fe789d5a1d7 95536 libnginx-mod-http-perl_1.22.1-9+deb12u6_mipsel.deb d1b0652449c6312931389d2a5056bae383cda23e 53444 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_mipsel.deb 6acab5a0d0644bf12d1a77bec50f68f8b9f36f68 86820 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_mipsel.deb 4d6dca36477ebe4719607f203f4990876cb83d7f 110800 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_mipsel.deb 5aa549c2c6fe48fed08c0cda398bc142c31b0388 115560 libnginx-mod-mail_1.22.1-9+deb12u6_mipsel.deb 57e8219364fafda5db72fc5633542cf5bddd85ab 178500 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_mipsel.deb 7045357b2ef89aa6ea112eaf9ab8ed6546fd638e 23072 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_mipsel.deb ee4827a4ab55f98757eb885e3739206177013404 84384 libnginx-mod-stream-geoip_1.22.1-9+deb12u6_mipsel.deb 7929cdd22eeeebac51bd55578d80feab931ebb98 138804 libnginx-mod-stream_1.22.1-9+deb12u6_mipsel.deb ab1d9088dc445987b6585c0818862df37699f6c9 1147960 nginx-dbgsym_1.22.1-9+deb12u6_mipsel.deb f880a63daa477dd5f316e155d4664fffc08a87ee 80812 nginx-extras_1.22.1-9+deb12u6_mipsel.deb c41afb8bb79b15d46d340787b259343c8bd83489 14082 nginx_1.22.1-9+deb12u6_mipsel-buildd.buildinfo 505fbd8ae0d46fb5a01f34a8dbfb216d8e8c62d3 487904 nginx_1.22.1-9+deb12u6_mipsel.deb Checksums-Sha256: 748d7ecee55a69f54196c8ee03ace8ed5ae516b5d8134bcd75fa69fc872575fb 37400 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_mipsel.deb 40400fe34610a645c574724ff20ebce9369f29963bbbc3ce2249034d0b002fda 85164 libnginx-mod-http-geoip_1.22.1-9+deb12u6_mipsel.deb 40a1ab1796299aecd903063d942290e0b1fa8bb6da0f90ee3676831746e29a0f 44680 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_mipsel.deb 2aa0394f067579a1245194605d6c6419ad270cfc35b26f4c75f45200c9e565d2 88160 libnginx-mod-http-image-filter_1.22.1-9+deb12u6_mipsel.deb e051f714180e36a6cbdd26702c5f0336e6d6a68cf56d819796595f087b27256c 99788 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_mipsel.deb d16478d00b7da1b461501797e2168ee6074e4d06c2368153381da3a6e914bc92 95536 libnginx-mod-http-perl_1.22.1-9+deb12u6_mipsel.deb fae160abae71812f86fae729219835c2f0d0684b08dd296d910d8ffb17276b7a 53444 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_mipsel.deb 1ef5a3330b070af167186a028b32c8f359245617ffaa5d5052a979324a682be1 86820 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_mipsel.deb 17d39b3f53eac0d15b8cfcb487b92f212c358675633f8ba9767770b5ca4e9ea9 110800 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_mipsel.deb 03be8679c42f5c670bcd7cce423bae9e3fb81598cec1b7cde83e7a53bb65b512 115560 libnginx-mod-mail_1.22.1-9+deb12u6_mipsel.deb 028c83c2ebe8d07b60b2aa93f0e0646e2c3fd73a2f9c741560ee698a37c03f17 178500 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_mipsel.deb 824b2cac5df53354a70cbbdfa6e5b646b1e604f1d3a5f93098dec7ea6113a77d 23072 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_mipsel.deb f677d6d9d046bb3dff10fc56f81afd643020e9b51569189c6a07e80835c036f2 84384 libnginx-mod-stream-geoip_1.22.1-9+deb12u6_mipsel.deb d8e9ebb97c27f43d3c1fa634ae3bb08d1bd063967e0694d9ad45d46500175b3d 138804 libnginx-mod-stream_1.22.1-9+deb12u6_mipsel.deb c0bf9b74f4b52b91273f0192e4775553178e9a4079f83c3308223fb0cf9d4455 1147960 nginx-dbgsym_1.22.1-9+deb12u6_mipsel.deb 1ce3154666e39f2acc39d54b98645e1860f4bd1c15a407739a90d08a8d5521f9 80812 nginx-extras_1.22.1-9+deb12u6_mipsel.deb 70a84f6a27db55126d342cac10a7b0b94c3d9f4d8ef2fdceff86e699fbefc334 14082 nginx_1.22.1-9+deb12u6_mipsel-buildd.buildinfo 49b4605e287c7fa546a35ae4e0b197ab87de4d73463e75a306b0037157d8aa63 487904 nginx_1.22.1-9+deb12u6_mipsel.deb Files: 2b79e67a6a5b9714f7b296fadd644fcc 37400 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_mipsel.deb 526f6ca8fd3c4cce0e2500b74ee62c14 85164 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u6_mipsel.deb 399f5332c95528250dd603c376b8d34b 44680 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_mipsel.deb c50b3dfdb2b7fdcf5250e23c09e0bedc 88160 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u6_mipsel.deb 1902bab6eb4738aa29c43a4ebbf63174 99788 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_mipsel.deb 32006e3f961275ad524ec0dbac8b3a40 95536 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u6_mipsel.deb cfae369a7d7975a907e045870b593fd1 53444 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_mipsel.deb 12e3aaae99e5846e77dbe202676227cc 86820 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_mipsel.deb 05316520a8889ada28c3e81db4756bff 110800 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_mipsel.deb ac7ddaaffd548861ca15be1506e5fae3 115560 httpd optional libnginx-mod-mail_1.22.1-9+deb12u6_mipsel.deb 0ff92b6e5a0613d266f70c0d40a5234e 178500 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_mipsel.deb d273aa52b00771626bdd3059023c54ba 23072 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_mipsel.deb bf9db7cd5b7b3cee6b221f98a12ec282 84384 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u6_mipsel.deb 5bc7d708785b892400d2f0cba4d906ac 138804 httpd optional libnginx-mod-stream_1.22.1-9+deb12u6_mipsel.deb 22a713443fc7b0bf51a828ddeb3e508a 1147960 debug optional nginx-dbgsym_1.22.1-9+deb12u6_mipsel.deb 610061153c1d312255838a69d0d5951f 80812 httpd optional nginx-extras_1.22.1-9+deb12u6_mipsel.deb 8fd54552ccadd6a00c253ed16b2aed23 14082 httpd optional nginx_1.22.1-9+deb12u6_mipsel-buildd.buildinfo db61bc459870c1ab93952d022425c443 487904 httpd optional nginx_1.22.1-9+deb12u6_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmn5hAUACgkQpwP2OD8j ZarB2A//fMCcR0buoTDbAuCfOQdsqHeaTBj5cnOgPEdS6kE8FLveZQaaU6Ux2jej zDqPYBe7pVh3lpYSiV5xIhjJKj58E21YCZmhh3u37vJRAxg+nX+T0Rrz+1XqbUfR +t/5TkiU3fLk5SzL786naTcd9dZ8FaSZ/CzQMRxa92sTjZyQyVwqTAFlirT32ZZh 9jYiWoMBs70fJKSwIWLoODuk2xOqvfQI64Z9fgSwXvXyCgCGZZ2saKyXLBAdNvEs kvh5UZAPOiucJL3frT8QR5HscMFDpdh6jvnBilMpA5YkWwZHeJSp2325jFX66sev HrNf+jSS8L6N3knZTP1ItrcQtEgIQP1BN/tq21dfc4s8TIGlvn98NLGrUT1rldSd 9QJfiUF2tj0RrDBZUx2/fs6zTQJYqjFiTQzbT8chDRrEep2oCrzDXss2MlmeiB8V FIqTFYKNKT2mYRGlA7OxXBe7guQywsh5WZF3XZOjbC3fhTHdzyXrDIuwj/Ymc5Lv Jz+VmLyw2Lkz4l+wisfsl+nN9f2T+Frm7/MitGwVx7XifrVL6ZMT2jgrdwYLT2bE Qradbjp3KLela5vf02dyFZ0Q/lIel8IdkbUok7XKHQUCdXGPsLd+4EHA61NjfQsR 80zi6m0Hu99xbzwRuSrJeHlSly1tRJQGRndHOQoJsxP3m+H+3JE= =22jA -----END PGP SIGNATURE-----