-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Mar 2026 17:41:51 +0000
Source: nginx
Binary: nginx-common nginx-core nginx-dev nginx-doc nginx-full nginx-light
Architecture: all
Version: 1.26.3-3+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Description:
 nginx-common - small, powerful, scalable web/proxy server - common files
 nginx-core - nginx web/proxy server (standard version)
 nginx-dev  - nginx web/proxy server - development headers
 nginx-doc  - small, powerful, scalable web/proxy server - documentation
 nginx-full - nginx web/proxy server (standard version with 3rd parties)
 nginx-light - nginx web/proxy server (basic version)
Changes:
 nginx (1.26.3-3+deb13u3) trixie; urgency=medium
 .
   * backport changes from upstream nginx, fixes for buffer overflow
     vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow
     vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647),
     mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753)
     and OCSP result bypass vulnerability in stream (CVE-2026-28755)
     * d/p/CVE-2026-27651.patch add
     * d/p/CVE-2026-27654.patch add
     * d/p/CVE-2026-27784.patch add
     * d/p/CVE-2026-28753.patch add
     * d/p/CVE-2026-28755.patch add
     * d/p/CVE-2026-32647.patch add
Checksums-Sha1:
 a73b425b42d33f6fb91451308afc358e2c3bf4c4 109096 nginx-common_1.26.3-3+deb13u3_all.deb
 36242fd76dead481c93e9a3143e6d2847781d1ec 83488 nginx-core_1.26.3-3+deb13u3_all.deb
 a18fe884677b20e5d045aed884185a61377ef503 196272 nginx-dev_1.26.3-3+deb13u3_all.deb
 73bd560455432d81fe3c7ffd0126ca42630fa1cc 91592 nginx-doc_1.26.3-3+deb13u3_all.deb
 fc9752e7d7b9acd0c2daa597e8747023dbfed63b 83508 nginx-full_1.26.3-3+deb13u3_all.deb
 f7b3729c7a025d18c714d77c58d46227a461aaa2 83260 nginx-light_1.26.3-3+deb13u3_all.deb
 bf50fbfbe850c84a08cc3b5a13d2b0174e36b88e 9783 nginx_1.26.3-3+deb13u3_all-buildd.buildinfo
Checksums-Sha256:
 4ef341cc65621066557304a4d8f82a020b441cb4695279b38db2c8bfc5b1d6ff 109096 nginx-common_1.26.3-3+deb13u3_all.deb
 3d1856ae41b661a05dae44763153762c54ef891b61f5cb944d1f77a7fdbdfe94 83488 nginx-core_1.26.3-3+deb13u3_all.deb
 c2668f13fccaf474bb229a69eadd52628c94ce0f1a0a5c49c623bb825d2ff0e9 196272 nginx-dev_1.26.3-3+deb13u3_all.deb
 9b67a33be76194824d1210c70dba512f661eb6d0f3a893df2849cac085bb5bcd 91592 nginx-doc_1.26.3-3+deb13u3_all.deb
 edd5e78671373f34be9cb95bed6c5617f017f8ff4e231bf0210fe2b8c5b0ae2f 83508 nginx-full_1.26.3-3+deb13u3_all.deb
 bd164d2d1165f932674ccd9e0e3d0cf33b778f7665a8c54c96ef1fc9b50bae40 83260 nginx-light_1.26.3-3+deb13u3_all.deb
 eb82279c953fcc1c6da5ba35cab18d723824f5511f5d2a84573484235056308f 9783 nginx_1.26.3-3+deb13u3_all-buildd.buildinfo
Files:
 4f8ae0e709cbb05f1e344c256d27721d 109096 httpd optional nginx-common_1.26.3-3+deb13u3_all.deb
 0e925aa6055873d7c0a7773c2c1e7d47 83488 httpd optional nginx-core_1.26.3-3+deb13u3_all.deb
 3822303b6501810bc81594745388d905 196272 httpd optional nginx-dev_1.26.3-3+deb13u3_all.deb
 175d16847abada2faaac5253fdab2570 91592 doc optional nginx-doc_1.26.3-3+deb13u3_all.deb
 9c6dcdb29fee70405cdce6b6ed4ee5ab 83508 httpd optional nginx-full_1.26.3-3+deb13u3_all.deb
 2914d209bb5457790a4cd6255907560e 83260 httpd optional nginx-light_1.26.3-3+deb13u3_all.deb
 982bb923a9a311afb711338866a3a235 9783 httpd optional nginx_1.26.3-3+deb13u3_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmn2Wb8ACgkQaBVi67oX
tfnr/A/9Fp7ndZSjeh8v1yDCgQS6+QtU5QlHeXujphxqbHQC188EyVz8/PUu+128
Qgako+hhSRGlcrsM/GgovNUQC5ruwmcBihyI/rTv5thRU6PAu0XZnD9m6vCBBwQo
aplMLZ/nyEBtSvFPO9tVQq1olPbUB++yIIWUa22petKj/+g469iixGKl9rcPBKl2
mZqi2UkSgvoAYe3pK2oAiJ7QVh4lc+CwVlbRRFvhtzs2McXbW1WcAJZWAH6CFcK+
9ssNxA3bZhPCUaQSJTkHfjeJSoMFS8U6TYx92nxj5QMqLX7wzE5k7i+iggZR7EJw
YNMDGcoIcshdBtd89Nn3hQbeQpuJwtEqO2PiIRKDWwvMJ8IoR2IdCRCetQ6MIXIB
Hw72uX9lAzfAb9ods8bitJQAorBEsdZ33X/H1fnWXrSnOLp8mtrhMtCD9D03gPwy
yhlULN9jrRDOp0o+Ra35WhBYInKQtKDYVbQ6J0kywDTbJDzPFXcjXPXyG185Pzws
RAu7xMD+HqvXUAtZgpXHjXl4gBU2YbPMEpuBfYAyqlpnP1GXi3+gdt5fD/B1+wTo
lDUjPQLu/rncLzvp7wglcyczID2nbzVaxFLb1pSnC784TjOd+dKgv3w7rOrgwtII
8ocW/jnoHxypxPHimlCtexl4Q4/bpPCAb+FIT6NYrTGKMusUBks=
=nTCm
-----END PGP SIGNATURE-----