-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 22 Apr 2026 20:15:43 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: s390x Version: 1.22.1-9+deb12u6 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u6) bookworm; urgency=medium . * d/conf/*_params: use "$host" instead of "$http_host" * "$http_host" forwards the Host header exactly as supplied by the client and may not match the effective request target (e.g. absolute-form requests with a conflicting Host header) this can expose inconsistent or attacker-controlled host values to backend applications (uwsgi, fastcgi, scgi, proxy) * switch to "$host" as a safer, normalized alternative * note: this changes behaviour, as "$host" does not preserve the client-supplied port; deployments relying on "$http_host" including a port number may be affected * it is workaround for Debian bug #1126960 for stable/oldstable release Checksums-Sha1: 08946d5e379805da5cadbeaf31c87723e8fa9f3c 36144 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_s390x.deb c9494e17df5bb2e0254035596c13913fb6ed34df 85048 libnginx-mod-http-geoip_1.22.1-9+deb12u6_s390x.deb f1bf484faae3191863df6325e2a9cafc4724e018 43608 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_s390x.deb d0ef55f853e9c5f40cc8d879a0e883c3cf472d06 88356 libnginx-mod-http-image-filter_1.22.1-9+deb12u6_s390x.deb 16c92088f91359694cce3ce1ded82b66c2182b5e 99540 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_s390x.deb 0f9059c8fd65bd29f1b68f139475e0674a826f4c 96076 libnginx-mod-http-perl_1.22.1-9+deb12u6_s390x.deb 198d3d664446d70d55d82d739abb2af287f35651 52968 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_s390x.deb 64c6c666d464e1ec8dc64bfc655d54efdc6233ab 86924 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_s390x.deb 7a0e8b39cff949475c7bf4df891be3723d3ca523 103520 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_s390x.deb 664be1c138985ae5d17048144b2e1e56f8d3055c 115480 libnginx-mod-mail_1.22.1-9+deb12u6_s390x.deb 67919e3f0c86ffba234c6801189565e65ccea433 170176 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_s390x.deb 47d81e7d37c5804dc8d68e0ceb8f2f62284348ac 21632 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_s390x.deb 1f6b4d53e0e7a3eaf30e5d17b3c3510677294c32 84276 libnginx-mod-stream-geoip_1.22.1-9+deb12u6_s390x.deb 986945563b49768cde5ab60dda68437fde65ad1b 138420 libnginx-mod-stream_1.22.1-9+deb12u6_s390x.deb 853a703efee2afd8eae2eb8ccc3f11d76688cf18 1096320 nginx-dbgsym_1.22.1-9+deb12u6_s390x.deb c2de6c827a9d03ed31956927cff31062baa7cf37 80812 nginx-extras_1.22.1-9+deb12u6_s390x.deb 1394877bf554a7a029f8c8a0a2a9cea5655cacd5 14064 nginx_1.22.1-9+deb12u6_s390x-buildd.buildinfo 3675626aaf0e49b00bbb714f2fbfeb23bb1857c9 482824 nginx_1.22.1-9+deb12u6_s390x.deb Checksums-Sha256: 7500e24a093e4978a21a65ae0b0d70d86a75082431253702675a0975dbaec19b 36144 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_s390x.deb e6cb5fb16aecb7e5718dd03d3416e44c9700c4d1c8138010f0d1c823b4017f5d 85048 libnginx-mod-http-geoip_1.22.1-9+deb12u6_s390x.deb 7950bfbbc8ada5413f9a8a427785870e1fb29de2be53afa90a3ef02a413b62b3 43608 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_s390x.deb c292d22faf0620b9cd1d82a9d07f6769df0d8f00ce3fc905ce1d47656a5ffa77 88356 libnginx-mod-http-image-filter_1.22.1-9+deb12u6_s390x.deb c33e66b3105f6be8e6b1940bc518651b7fa76d5cf0fb5bf4738a546c240831a0 99540 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_s390x.deb d9e77c83831e0a4de1ee6d8b7fb7e98db0ca669049447cdf3d4baa4483e88434 96076 libnginx-mod-http-perl_1.22.1-9+deb12u6_s390x.deb e7dd21ded97c2ba37ea0965bd18b84e0ec43e6211167afdb28b302f5f69883ff 52968 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_s390x.deb dade8437acdca07d22544438cf74e76a13064414df12038c6216fe443d2d0490 86924 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_s390x.deb 4a746d2f89c3ab169c45e7912924171546d33bcac94f95ace2a21ca36114cbdc 103520 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_s390x.deb 95f43d66eef23f069fa6a04f49c9ff6225011a501ff6b2be54753a32057b4fcd 115480 libnginx-mod-mail_1.22.1-9+deb12u6_s390x.deb 529d09d2d99d4bfdf30bb54ce6c086d5e6f886010e294341cdc0e951c7e560c8 170176 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_s390x.deb e028f1b93c4a6bb882ca4c4941a1b8ca9bb8a7ca8f3058e0c77e64880eebfdd6 21632 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_s390x.deb 46bdd224c687d7882989c47fdb0627df2d0873ffef7109f59e91d8f0abda7717 84276 libnginx-mod-stream-geoip_1.22.1-9+deb12u6_s390x.deb 4345ac9031d3d555e10c17fd16efa99be17e839dfdaf73fc8c2265014435441c 138420 libnginx-mod-stream_1.22.1-9+deb12u6_s390x.deb d02b752c8c4d1bbac092d8e5ba8aa2988689cab1a43f0f75f6387a199c2c6d43 1096320 nginx-dbgsym_1.22.1-9+deb12u6_s390x.deb 3a77ffc07ff9a9e96b65de3e9cba2de6cc40c4d5d58cfd65dc7fc946816fa1bd 80812 nginx-extras_1.22.1-9+deb12u6_s390x.deb 474046aa7d6dfa101bd240c9fa743eef767ef5cb60c9fc06eec81f5f5071d703 14064 nginx_1.22.1-9+deb12u6_s390x-buildd.buildinfo cdafb92ab5e7c684b67858baecae9e3832cfa8a8dab1ddb94c365cfb552ffa43 482824 nginx_1.22.1-9+deb12u6_s390x.deb Files: 4c34b88f3096f46cc173fad24e02001e 36144 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u6_s390x.deb 9cea7dc30cab98e90943d1b6f3b08c6b 85048 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u6_s390x.deb 5b85bab193f054eda66d3ae7cb51cae6 43608 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u6_s390x.deb c9bf1d1d5e8d4ecd20377deb4f66bf6e 88356 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u6_s390x.deb 51a225d2379675596c40b8cb01294825 99540 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u6_s390x.deb c49fedf8b9035c5013718b5509b9dc66 96076 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u6_s390x.deb ea744381e63ea90a8e71e7504d14445d 52968 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u6_s390x.deb 77a3a49ccb29592d5aa3419e4d08b71d 86924 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u6_s390x.deb 6b8999c64949820a4208e729d0e912ce 103520 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u6_s390x.deb 157af0d3f9225ce85b5d9ed364535cc8 115480 httpd optional libnginx-mod-mail_1.22.1-9+deb12u6_s390x.deb c3344c2beaca417802f08353883e3d64 170176 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u6_s390x.deb 97237ec5e9447f2561dca52e3b484cf8 21632 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u6_s390x.deb 75eafec2c49c3edb1876950998f38dc3 84276 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u6_s390x.deb 1b802f862e336f05747e4df9c0c99b33 138420 httpd optional libnginx-mod-stream_1.22.1-9+deb12u6_s390x.deb 753a8d1cce91e88b763bb18ae897bd3f 1096320 debug optional nginx-dbgsym_1.22.1-9+deb12u6_s390x.deb a1592aaca71d205ab3103e695110a5a7 80812 httpd optional nginx-extras_1.22.1-9+deb12u6_s390x.deb 353e21bbb5d6c26a92d0f884afb08d30 14064 httpd optional nginx_1.22.1-9+deb12u6_s390x-buildd.buildinfo 599f221396a5030f2397e43817912615 482824 httpd optional nginx_1.22.1-9+deb12u6_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmn5g2MACgkQkaCrxAR3 BY0vbhAAyca8p68EJ9zWaejQnIbyh8Vgdg5TUZns2kruuSncYpmA0YFA/nbnYO44 dMogSArymxJJ88q9ASlhHzAeOtxbLJA6My1oxMlcbSuEGKWHr3Pn0QdmqOB3vANC c/ThftwGBuw8KlKQDikZjUkoyYXhuc6Hxknil/B1gJgtx3B4uzTr8a0y7l8V/+K6 3IPeVlST1Y9Xy8Sx8uqu4SVUnEZTyHzhtNvJxvUmkojw9EeOZoPlOZdRUMA0I27R Eu5V092MDMLZAweY/1mRhJa6P17gYjQHOisxzr4tueXu/YcBZQgyVu84OhfE8d4f 1DhZG5oW5d/KOdwwGYLGRCcTLKJCn5T0i3cCsWZTP+uiF9FY3MdISVKdMh+2xnxe Si0rxv4OMOozQPiFmT+iN4pJrZZX9CtgLMWWlN8r+/6kxTyMP57jIOzq3Ji4IW9s dGcmcIWTGgDnWZ0oE9ZDXLz2C/wY/WKa3DajnAFsULtJFhJFXMixdZkWuuUyI5BK 1je6ccO46gNrhJvUY7mgAnHRcgmp87FDOz+gF9ayMJQq/qe8Fg1HlC9cc0QO5Wcp 55IViBNmYbVdyT13XqnXyEDUxfED6xY1/gQoT2c6h+JIIAljbwPjk4rCdevXgMsN aV+T5XbfOOV5bTLgfGNBlMh80kogdRPOJTL2XqYKc4stuyxwiQc= =YfdS -----END PGP SIGNATURE-----