-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 17:41:51 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armhf Version: 1.26.3-3+deb13u3 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u3) trixie; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: 608888db84aac7e833c2229795e05094098e559b 38376 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_armhf.deb cb21f91b12fc6ca3d68886b04540cbfa530b1add 87596 libnginx-mod-http-geoip_1.26.3-3+deb13u3_armhf.deb 63ff0662a524ce0c9e237249c36b0090789b1489 45820 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_armhf.deb 0009985c840f548d34febc2f65d78f915aadb929 90856 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_armhf.deb 78c283deba0bf8be41773ac79ac54e4ee9380916 108420 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_armhf.deb 87f7c8881e5ab97c443512d17a03b94635fb2380 98032 libnginx-mod-http-perl_1.26.3-3+deb13u3_armhf.deb 11c531f1e004beaa6c08af52ba3d33d10e69dd41 54492 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_armhf.deb 1f3415a075dd980afe60ba066e9b0a6aa0e81b25 89504 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_armhf.deb 15908b7051ff8c92645c219f6e5343a4c7301ea6 110772 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_armhf.deb a6e0a3f304e33d58ef6b892b8934346f05ce4cda 117756 libnginx-mod-mail_1.26.3-3+deb13u3_armhf.deb 941487b25e41816ab0c88b8892789d888bfa004f 190824 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_armhf.deb 360562e9d2e52a0358016de47be9afe28448e593 24600 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_armhf.deb 371ef3ff72bf0709d7f7b5ac96e5fd36abfda47e 86880 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_armhf.deb cb327a8267379e1fe9707b72f71f72c45d12a74f 142556 libnginx-mod-stream_1.26.3-3+deb13u3_armhf.deb d2414fcb1d74c34ba64c5331b49c7518e55215b4 1342820 nginx-dbgsym_1.26.3-3+deb13u3_armhf.deb ef2eb90016259f3fda9330afd2f5ca8df6e8705a 83648 nginx-extras_1.26.3-3+deb13u3_armhf.deb ec4849ef1f8d522d712167f1eb6119b49b9f4bdb 13788 nginx_1.26.3-3+deb13u3_armhf-buildd.buildinfo fbf6b7d09773107dee5b1380bbee4cf0be33f386 548896 nginx_1.26.3-3+deb13u3_armhf.deb Checksums-Sha256: bc8c1c0187acb2b0a7b40cdee9aff7d812024a477b4ec6a864c9162af272ba04 38376 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_armhf.deb 471f43ef16733f10319be4e54576866f5bc86182736e48a177691852fa7fc307 87596 libnginx-mod-http-geoip_1.26.3-3+deb13u3_armhf.deb 5cfd59fcefb1d8ec6a971d545089e5bd41b987f78cb39538450f916abe6f06cd 45820 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_armhf.deb 55b7c6130f362240ba07361e7580972939cc5f9834a49c9f51970b72978e480a 90856 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_armhf.deb 4145566034e9c49351b64a9228c30df2fce8d750969d3a7fefd2c6c186ac2321 108420 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_armhf.deb dc383fe6fb23356380ed6f3b52ec1a7d234da0117ace1c47ddb8aac8dc561c1d 98032 libnginx-mod-http-perl_1.26.3-3+deb13u3_armhf.deb 184ecb629ca76a3af374114dea3afce423b67c23fd6c7d3af43a6e9c6bc32597 54492 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_armhf.deb 359c79ad4a1ca2881ca5eb217c95aa7fc9817b25290d1b1ae965ef5f9e25e2e1 89504 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_armhf.deb 335103b3036ddb91b784f108b5e32f7e609aa8ddc6fcb2afb0352c425727f0c7 110772 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_armhf.deb 3ff325cc3cda6d5229acff6d08ad1ec482d6121e06fba1b34ab446fb0a9a05ac 117756 libnginx-mod-mail_1.26.3-3+deb13u3_armhf.deb 9bbe81babc44ea5a7d59c1f83378ea17bece64c9a4cf4b61ca57ea49f2449a1a 190824 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_armhf.deb 41056348f9e4d18048431745dca746626fca847b3dea53ff7edf432b941b33fd 24600 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_armhf.deb 52286a8708dc7d5b13211214be5c4e864b7586c67028a20232d058bf96030d0f 86880 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_armhf.deb cf72ba9f9c6125531ab44e2e068b564a17d7c6d9c8a3187edbde2bba975e5b31 142556 libnginx-mod-stream_1.26.3-3+deb13u3_armhf.deb 77d39bec1fba028468f096dd0449941f932d582cb6f1d334bb5f42ced57fdc6b 1342820 nginx-dbgsym_1.26.3-3+deb13u3_armhf.deb 94735a51db7c3f7c37ffee635ef2a7e236221e773f9194564d01172165af546f 83648 nginx-extras_1.26.3-3+deb13u3_armhf.deb 64c2812402d99a851bf527c6e350a741b14e87b75cf95cdd7b36c04ae7983feb 13788 nginx_1.26.3-3+deb13u3_armhf-buildd.buildinfo 1eab476f65b54ec27f6defc1ed2da1402af7357e9d5e9b3bf245a8f23a6defd1 548896 nginx_1.26.3-3+deb13u3_armhf.deb Files: 9e987829b13aab60ec8335c974ad331e 38376 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_armhf.deb fa691cb03ad6a6953b2e4e47520ef1a7 87596 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u3_armhf.deb 9a78b33a3a78dc48879ed2720ad048c0 45820 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_armhf.deb fef917498a954f6ef159d1f5ea5c9ab1 90856 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u3_armhf.deb 8707143bb37691e4a1a0c05904d48198 108420 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_armhf.deb e0d5486d5a680bcf897814142c239f23 98032 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u3_armhf.deb 2d092602c39c56ec9f3ab857418f1f29 54492 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_armhf.deb 6104103884bf3a1241545e2f49284de8 89504 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_armhf.deb 689b8b68477f2425fb446e1f87cd285d 110772 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_armhf.deb 8f1e20f4b7b7974f2a7b284d6158a12e 117756 httpd optional libnginx-mod-mail_1.26.3-3+deb13u3_armhf.deb 1eb1358c7510229d879bfe73d4735b3c 190824 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_armhf.deb e8793ec183855f0f7bb26896bf8f7de9 24600 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_armhf.deb 540df0e6f7633e82e986985eb715c7c5 86880 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u3_armhf.deb 0d1c32668b8b113abb9dc503b2476c15 142556 httpd optional libnginx-mod-stream_1.26.3-3+deb13u3_armhf.deb 122d23efd8a83b281ee0309bc2f1392c 1342820 debug optional nginx-dbgsym_1.26.3-3+deb13u3_armhf.deb ddafeafc50342da1de306e681663a833 83648 httpd optional nginx-extras_1.26.3-3+deb13u3_armhf.deb 7667d72b0dc83ac530c65d02dfddd03d 13788 httpd optional nginx_1.26.3-3+deb13u3_armhf-buildd.buildinfo ee30b729cf379bcfbcb787f410caa2cd 548896 httpd optional nginx_1.26.3-3+deb13u3_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmn2WMgACgkQ8U6eOZMp j68U7A/+MlaOtUAXViC2R8W25MUpH/kCw1RHXOpQ1UZjtlxyFver+UPTlAF3vMsA /seDnnCmUn4r8n+eNJNddXC7Pfk5RK2GKQrPWXyJgQBGoRrlLXUahCKyMJ3MNBxr zQ/r/l8qC5KswrCb/wA+Et2gyIpL20ktacokh2dGJTuqZ/iycdb6dJtQ42OBGaON cpBI7wOOVdIo/MPM1sGbPDTedGgTshedjf8EdRBK2weE+jZsmGwqA6Ict9fZizYi hF0yHhEcuThDdYBuMUsY8f/bSsl5I0SV662C0z5eE9uXe+7Bfm6qCnurUBILVhoI EMcEFOx0FsHrSa57nq3qCFohIP1FYy+6bC3iorlIHenatS7eFuEk6LVbCe9wuH6Q srXZeZOlf2W4nKMxlY1zVVyXsbUytpugaJE5ARheu4RjV2QKAKb+f+avPYSTIK5u ejJG/e+qDeBvTPvFI1OKauspwMrFcereJYL0WGeHCXgYWPHjMKewqvQVq5/KyqJL a214iv5YdEA69I98+OKb/fHtLwf5cVNstLRwQAb/HazGwo2PZSmOEisfZMuCSIbK KcgOW9rrTldwwkuLDS8GuboHoOlmNPpQxK41H0DU1vlFalTKSOopUkMtb2y3ZTq3 fnS0ZHuJAEVruq8LGyl28HjamjpRVlhQ6dv0X5f7rzjGj5YRG20= =kjMN -----END PGP SIGNATURE-----