-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 17:41:51 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armel Version: 1.26.3-3+deb13u3 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u3) trixie; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: ed6e506481a4dbf6928dd5ad4bd28f187e73041f 38380 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_armel.deb 98de89977643484835ecea33e98172b97ad66926 88288 libnginx-mod-http-geoip_1.26.3-3+deb13u3_armel.deb 5e4c1383274a80c77ed10e66932af53165c61727 46208 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_armel.deb 9fd6878d70f096af146f538e6b39e1d0176835c5 92292 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_armel.deb ea94cf586ab0dbbd42d91a5bb26d100d90052634 108352 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_armel.deb eb31561754e6760a530d750861df0bd2af6ef214 98108 libnginx-mod-http-perl_1.26.3-3+deb13u3_armel.deb 301cf63aff0922e3b17fb9a7b0993ec98aa9cfcd 54408 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_armel.deb 2d50d93cf6e7877af28d8c46b4fd71fcfc3cbe63 89508 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_armel.deb ba2ffc43d7fb601cb2dfdbd29c28af8e3d24abc7 109876 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_armel.deb 30f137ce08190ae88d6f7bd9e44b43f6b1c14b75 117324 libnginx-mod-mail_1.26.3-3+deb13u3_armel.deb bd37257bb97b0033c6192570b0f8a089b927160f 188812 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_armel.deb de11d910c8e7da6120a0d567e5b5b7cb60b7019f 24536 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_armel.deb 853e1c57cb8095c2045fe0960da7982b68aa23f7 87584 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_armel.deb 5767a6136931cdec706c9105268a8017057c921f 142004 libnginx-mod-stream_1.26.3-3+deb13u3_armel.deb 806601728be0fb3872cfd58cc6634b7047f76356 1320628 nginx-dbgsym_1.26.3-3+deb13u3_armel.deb a165fd44ec2b7bdd0a7f5f97b137dd39ff1e523e 83648 nginx-extras_1.26.3-3+deb13u3_armel.deb dd24cb1779c9dbab5415f569bf51a536131a691d 13774 nginx_1.26.3-3+deb13u3_armel-buildd.buildinfo 5898cc7558ea87bc0dadb6407f3a3ed22abb8a2c 538624 nginx_1.26.3-3+deb13u3_armel.deb Checksums-Sha256: 843f423b7fdabb12158c019d1a3da2fc13c9cb04859c443f77e8bb73490b04a4 38380 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_armel.deb 13b381b3ce9f38e2ef7def121aa7e780cd751ca9592e5d0da6974d60c14f598d 88288 libnginx-mod-http-geoip_1.26.3-3+deb13u3_armel.deb 390c275a26ca33a51eccd5c3af512e0fba5d31d3a909f7f7ba4090692171eb65 46208 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_armel.deb 20602744542f26a792732974cd73847274784ea944ace1a8861ac4e186f156ea 92292 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_armel.deb cba1aedea7aaf24319a9fe8c290e2138a871c73826bfa8cebbd516c90d88507f 108352 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_armel.deb 3f8cb36fe9785af441f1dcee036764ffa7482184206c11bef0cd8287ea7dba42 98108 libnginx-mod-http-perl_1.26.3-3+deb13u3_armel.deb 27cf8ddc98fc282ac4a783da7708fc363da360612022467e64fd733045558c72 54408 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_armel.deb 2e5fe885dad75559b2b595b62e918fbf7ac3b4589b7aabb80701abe82800fdc5 89508 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_armel.deb a4040e6966e1c281a0a2bc1686aac09b4c0fbaf53fa55d1835e3d03695626c6d 109876 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_armel.deb 32b088a81109c3353575c98cefc32005eb86df287e5d5ef1255421bfbcd21554 117324 libnginx-mod-mail_1.26.3-3+deb13u3_armel.deb d617867b1108eba4a58eb14a22b8cefd361676c4c596af4b77848b6db23824e7 188812 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_armel.deb cebe10d520e558c568ac2873bd7200cdf38a401a8f6afb9bc1a7b8d45b34a0f2 24536 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_armel.deb 1b380e6f00e49213c9b30e485be13fdcb10347be55496d606c81ced5342ebd13 87584 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_armel.deb a7a36b99680ff2f571a782288a09dc70e836dbfdfc7f8c7d06c3c339e199a280 142004 libnginx-mod-stream_1.26.3-3+deb13u3_armel.deb 4dcdb33462e1ef9751b9e9046ec2097ad055eb63ca0ffaa8d435de2996be1e13 1320628 nginx-dbgsym_1.26.3-3+deb13u3_armel.deb a7babbea23b44ed40b393f0c2b5fce5fd0ce5e7849dda835ae0f902733720c51 83648 nginx-extras_1.26.3-3+deb13u3_armel.deb 4c7e911de61000cd69ff9e4aefc909c9f1beb7f7b6dfd838a1c4f6dc3498d132 13774 nginx_1.26.3-3+deb13u3_armel-buildd.buildinfo 93f362de04ba8948f6e3f7a495d57c4e6b504820f7d0b1029361166793c43cd0 538624 nginx_1.26.3-3+deb13u3_armel.deb Files: 828ccf8e7ed8d93601105a3e40057d4b 38380 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_armel.deb 72864d74a2f419b7c12528352a0a9c3e 88288 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u3_armel.deb b4791cdc312521944d8113dfd2b99f10 46208 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_armel.deb 217314cf887ecc28871a8888c3faebe3 92292 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u3_armel.deb c5426faff26c52dedaa6e2257c566514 108352 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_armel.deb d286dc1491105d63209b2111a501d159 98108 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u3_armel.deb 842ab5449ba50f977524d71303310d82 54408 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_armel.deb d6e62fe29cb84647db6965c8680454e3 89508 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_armel.deb 5a801a5ba183947e521798937b55e87c 109876 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_armel.deb d085da6fe5e5c1ebe042ea4cd14ac2dc 117324 httpd optional libnginx-mod-mail_1.26.3-3+deb13u3_armel.deb 14f89cbb9c1762e6e2e8e3100612f6c9 188812 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_armel.deb 898b40ca7d9596b84a38aa18759d37ae 24536 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_armel.deb 437e715a549933c7c475d9e03a9e2757 87584 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u3_armel.deb 2e03e9d80f9e94444b92329cf59b70dd 142004 httpd optional libnginx-mod-stream_1.26.3-3+deb13u3_armel.deb 18575a3914c1e3023026ef36156091c6 1320628 debug optional nginx-dbgsym_1.26.3-3+deb13u3_armel.deb b1364fb6f191eafad2d1188fe4c629d8 83648 httpd optional nginx-extras_1.26.3-3+deb13u3_armel.deb 1acfa670cd3cc80ccb244e1244d8c979 13774 httpd optional nginx_1.26.3-3+deb13u3_armel-buildd.buildinfo b3242a32b3ac694d864b570f6f5c8c9f 538624 httpd optional nginx_1.26.3-3+deb13u3_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmn2WnkACgkQVLd4YzMS DKFuvQ//Sh1GWNzL0AoHMUHbg4lNLrJOHPUU7GMdY6zDWPliT8HMpZXT7jpAynUQ dPP23+tsmfOW62tfDHpbWvRMZg8yGuwA9RcZoFjK2FS9Tp29SLb7dYNcp1+Lm/l/ 03hpDBusfsuDLg3dhheUaA3zICynE89VOV9i9hoAYiPt5rIktq/ejQ8Nrnz35C4W wb65QKuZZ94lpaS4DWfDEEVk9ZCk1xZshdSt5FHUDpa3xRanh6HYr318wd4ppyMr 0T5Bu53c2Zk2doxB6dWAPwDjbWe22Nm2UybPitrXNqYsBddM0ijAPpJPbB2fSkkn sPVyWbHaDjac+eeQ+iKt73bmivHikGy1+PjtHgNxNu8hPiUnaiho0X/JEULc/lH+ HYr+wsM0R3ABBmZ0n+sJ9mzZnzG+LcZ/7yhwxKTVUAmYQ4i15WMmUmURWTskkqG5 aEWNWwRqqvfNyHEeM92iF0PLDWPqfuOnpujITuYfM9w/iduyZQx79IqFbCU9eu2g 0oiFqFTn+znCX1mUKigDNWNcLKYW8e++hiMizKfIFLpWjn97ufV5LBuniuL3mrkf 8L5QTRjzrcThbTBtL3uwdmguyXlp/1qmqKqPib/7VDKpR6BpVnBSVUUIIN/wH7H/ OwHhYhPWI3+4dB5V96piEK1qrVN61j9xqAwUMWnkbhNch4S/loM= =vBOE -----END PGP SIGNATURE-----