-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 17:41:51 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: amd64 Version: 1.26.3-3+deb13u3 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u3) trixie; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: cce3d800f39cdfdfc8ba51076f4f2276db3ab43a 38084 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_amd64.deb 53b4e92d6e66d98477871504f948e2dd219a93a8 88204 libnginx-mod-http-geoip_1.26.3-3+deb13u3_amd64.deb 604d24a902330101fac8d9f0913baa059522d5c8 46396 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_amd64.deb 1e9dc8009908d05029faa3d37a765857e8bdbaa2 91936 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_amd64.deb c7a97a9eff6676a0b44ed7d6637d7233c0c35800 109660 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_amd64.deb 4319064ce614fc0600dc2175db706db84cd75ca7 100408 libnginx-mod-http-perl_1.26.3-3+deb13u3_amd64.deb 90625baf980605a5d1c40272d4642f78e12d73ce 54408 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_amd64.deb 3a02fc29f957e73e409aee8c815bf5b41fc4e130 90420 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_amd64.deb 6be4be5225000e5622aa02ec652905203599da5e 105080 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_amd64.deb da137e0fbdb1d45eb4b091d277440c34b6e9e350 122276 libnginx-mod-mail_1.26.3-3+deb13u3_amd64.deb a508af70d7641eecd85cd73607003fd89008e5f9 185792 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_amd64.deb c7943e69429b138801f31ea1b204f0e0ba7a3e54 24020 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_amd64.deb 4613b5af111a3b2c1fa3f1bcf3e9830b599f7a47 87388 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_amd64.deb a8bf6ff03fd5d05923c3a850f40eb5dd84cc286e 152372 libnginx-mod-stream_1.26.3-3+deb13u3_amd64.deb 9805faf6134f47503f3196051340ad450ac02580 1342360 nginx-dbgsym_1.26.3-3+deb13u3_amd64.deb 2151a87903bd8e77df29d3d98856188ab3e53f94 83644 nginx-extras_1.26.3-3+deb13u3_amd64.deb 9dcb3fecdc198ceab92ef20d3c2b42806f6e870d 13925 nginx_1.26.3-3+deb13u3_amd64-buildd.buildinfo 4b374597b3496fe1a2b5befc1ca9e87d5ca57510 609792 nginx_1.26.3-3+deb13u3_amd64.deb Checksums-Sha256: 039b760a8b7c87e20d4caf6064649faadd1d03a4f68ac500738e8f810e22059f 38084 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_amd64.deb c506c50c04a7d838a425d3f6af85b60630d9002d01c4b9f20019f6442fc77104 88204 libnginx-mod-http-geoip_1.26.3-3+deb13u3_amd64.deb 7e4417a3d2da73c16c077242435c5ef008b761929d378599cd74eab847961df4 46396 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_amd64.deb 2d59447de052e7e168f14227bb11f5a6969326c445abf1ed1dffb1e3035cc8ca 91936 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_amd64.deb e172aa159d5cb8e572b160589cbe4a8bfaed9d0d01bee5bdfd03634cd038c108 109660 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_amd64.deb 3ea584d7885832c7c1d93e00f6db228cd88ee26813c35c096792c88fc6cdb3b8 100408 libnginx-mod-http-perl_1.26.3-3+deb13u3_amd64.deb 8acefc850a08442cb017e4192b81d155ba59e9e30558870073ea95a0af319664 54408 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_amd64.deb b38842c98a28678871c408e0e52a0ac115ad5142b67f6c505bc81c5ad965a008 90420 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_amd64.deb b7ceb9e002860a31950abdb1688d01ec1759c88ae5a49bba88e8dbefc11f96f4 105080 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_amd64.deb ac064b2ade3d6027fe5fc3c5e368f1db193e8ed3c5e9da172aaaa284f06d9b9c 122276 libnginx-mod-mail_1.26.3-3+deb13u3_amd64.deb 6be68fc8ca4424026fe3842a8b0dd399b8994b058bbf17432eb43bf78f6caa2e 185792 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_amd64.deb 2bcede522a08454dbe106610338ea90b5e684aba48abb1cac295be9100387536 24020 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_amd64.deb 4bf42454d8d34540c380de00780d18da8ed3475f9646492e9cfc00a475806a65 87388 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_amd64.deb 560e2029401ca1d9701dfb89b1773e76c346c518499df9f986cbf05c3960e45b 152372 libnginx-mod-stream_1.26.3-3+deb13u3_amd64.deb 0d0eb42b9907e81ba68ced0f564290ed56c69ea780055c853438442e4f7e2b1a 1342360 nginx-dbgsym_1.26.3-3+deb13u3_amd64.deb 70be5643e49f3a137037b80ee00a4424692ea4561e41d7f2f557a3953852351d 83644 nginx-extras_1.26.3-3+deb13u3_amd64.deb 4c38199dd86f006dd03bf5b0dde57eb4bc79d03bd4425fba0f82ac0730525204 13925 nginx_1.26.3-3+deb13u3_amd64-buildd.buildinfo 2a39c09b80436b268da50c771252bdff777cf8329cc0bebfe91478480563fc90 609792 nginx_1.26.3-3+deb13u3_amd64.deb Files: 047f1175253650709cd05aa809586042 38084 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_amd64.deb 5ac07da2bdc5d29eaf3927d41ce70097 88204 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u3_amd64.deb c4e278695992bf74430ad2a5148ac2c3 46396 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_amd64.deb b8a04ea0dcfe21e9681ec6740135c113 91936 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u3_amd64.deb befffafbf6c50385418a37e575a143f9 109660 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_amd64.deb 46fd9217559a486d00e04b6fe086467e 100408 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u3_amd64.deb 3f23369a8b1764c024591f9a78a0a9a0 54408 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_amd64.deb b721824f3adc01937917718d26ed128e 90420 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_amd64.deb 43a7cc3ee3a437d8970faddf2efe2440 105080 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_amd64.deb 830cd1bd59e3ecc7f79956cffc5c1231 122276 httpd optional libnginx-mod-mail_1.26.3-3+deb13u3_amd64.deb 301ead69216f587a3eb6ca505df3cb1e 185792 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_amd64.deb 6913c62ead5cadaed02c0c940a608c01 24020 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_amd64.deb 889d63067a5c76e81c00cbf49fa642e7 87388 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u3_amd64.deb 27944075c52b115493db58d5531a76a8 152372 httpd optional libnginx-mod-stream_1.26.3-3+deb13u3_amd64.deb 59816f9123852982b17159bf465e8608 1342360 debug optional nginx-dbgsym_1.26.3-3+deb13u3_amd64.deb efc371ee19dd5900e1f0dc3e327efcdf 83644 httpd optional nginx-extras_1.26.3-3+deb13u3_amd64.deb f7723c4df74b8a4623a6b47a32302f4b 13925 httpd optional nginx_1.26.3-3+deb13u3_amd64-buildd.buildinfo 7dbd0d8f0e0ab89daac2dc106f5bc37d 609792 httpd optional nginx_1.26.3-3+deb13u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmn2WIkACgkQYg9P9sm2 dfEtmw//d0BSDkh0YXD4ORGzusxRa9ysFc2IeuzThOBZ4VvGgDe0hHkPMP7Qh3KO zesxTYkA+DrD+vknAX8fH2YqaS4c8wKF5OZhK4ZsopNdZh32VOZjVIxju4htsel7 i5XTqj9nTapzo+eI/vcQHw4kTZ9UhuyDmbmdgCBRgq+1b5QfZ1xoxnVtYWuFSJlb U/7nmRrDkjtfu6OYmVSs6nx6hzlTajU6Ddx4d1mwLGg2KRMe2U4AjPCgY/S9bGXA 4M3qP5WgWTfIM6N+Hwdx05HOxg7nEopuOPMIYOKhBH72OjYnxLJyvW+ja+BgM1O2 Jls4J+Z0WYFQL0T667/0BYFV9LD9Jgmf/qzEoTrKHmoa3GaR5uJb1YqryrUEVNAw 0JN//O3CKbmnMVzwlHMjv/oxz3CCHrvtCyGtqMNYGSbEHsd6MvIKsZ93AcwNcYMD 7kQ1rWYxh91vLccUUGMZtDyS6qdy/F2/pZlbgNbN8brmwsnNMfaYRukOS+wHHEsE sjl0NwFkP645Lskl4+T+JC4V/swYpnMXB8JMb/MK6J/3D1aGtafmUtHTXi+0G/uP E5uKC3KQJ03xX0N5Qnk/gHHrjCMq8XUIp1/DNltjjILBRQv1pcq13nI9qL9hJAyl j6LbGra+3D9AgIWpYGrOO6cBJqSK2jp1a1QcumrWOpwEWbTgNxw= =t504 -----END PGP SIGNATURE-----