-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 17:41:51 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: i386 Version: 1.26.3-3+deb13u3 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u3) trixie; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: 9784340b024760e807b8a6847a356440d28661fe 37160 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_i386.deb f168f92cf9d6203e5cfbd27825b6f56a239acf9f 88592 libnginx-mod-http-geoip_1.26.3-3+deb13u3_i386.deb 30235ac342a885d18ab5660f1e258235d4c7948d 44824 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_i386.deb da9db3321add3529486b89c63c8940c19156018d 92364 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_i386.deb bb772a98a9c5f4c7692ff42224854ba7484f75aa 104400 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_i386.deb ae1b7b4edb0b79760dac32e47f81782c568a5298 101628 libnginx-mod-http-perl_1.26.3-3+deb13u3_i386.deb 9e6d9e167e91f3614d2c3ce0cd180df3212b7d1b 53116 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_i386.deb 122d76d19820aa49bb4db83bf861730e69c32b34 90992 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_i386.deb 0eabc4d9ef1aa7f015d48ebb2d931f86dbd1dd31 103128 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_i386.deb e94337207582d62311f4b3f2e6211b7942223615 124892 libnginx-mod-mail_1.26.3-3+deb13u3_i386.deb a47dee5a57ce9e6611663a7641fe3a90d00adf1f 173424 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_i386.deb 7ec0f45849af9be72ecf0d9d258ae09326b89929 23508 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_i386.deb 67e71d79d2f3dcbdfd673213739d2bd00772b9b3 87736 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_i386.deb 2ff6ee013f01372b353f2233e2dc9c851a31571e 159200 libnginx-mod-stream_1.26.3-3+deb13u3_i386.deb 69346985d5e526e14c2ee295d3365497f461dd30 1220588 nginx-dbgsym_1.26.3-3+deb13u3_i386.deb 693ec6db407b414ae228eae65ef3acae809078ff 83644 nginx-extras_1.26.3-3+deb13u3_i386.deb 481eeb9bdaa14bd1e6fb0909d2acc802b1a171c0 13781 nginx_1.26.3-3+deb13u3_i386-buildd.buildinfo 32c3d3d9d51ba33899b4b5173e5a59d5634eb394 664740 nginx_1.26.3-3+deb13u3_i386.deb Checksums-Sha256: 1dff4cdce18b6752771b96292d5832af3a544e9087854c9645d869cc57ff1c2d 37160 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_i386.deb d21506c672c509e22dd26d50e8104a431edc7ab0c697209f2f84b2b465d43fb8 88592 libnginx-mod-http-geoip_1.26.3-3+deb13u3_i386.deb 07ae45e7c35e0bba9f48774cf2393bd3e38d20513f555def8cdc21691c2057c7 44824 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_i386.deb 2cb135a84dc8a4f375c5ae5ff90c9f55962bd32a8b719cc08a636845fabe4629 92364 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_i386.deb 836af8a5767b2599efc120e5548da18f5b365f96008a84a6c964e83e17275c4c 104400 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_i386.deb 7262370e0b63a344231cd462d60d130053814cb4f2c04b042027450ad3bbb06d 101628 libnginx-mod-http-perl_1.26.3-3+deb13u3_i386.deb 6a6f6ad5c7e56e3e3111d13a5d4195b277141ba15468c414455d9d79ccec2701 53116 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_i386.deb a8df3d953b4b5c393c852c841d8999ffa9975e28f2a39fa3c6ec94e3b579cdd9 90992 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_i386.deb 37a94fa87f954e584aee0814b71e89e50474248e6106a2235dfa6b62b83fb198 103128 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_i386.deb bd540838f2d7ae3403c9c2cad41e6283831f3c4cea7f130032790894f2bce0a3 124892 libnginx-mod-mail_1.26.3-3+deb13u3_i386.deb 2b6b30416e32b2db9a431e3055e6e2b0485b005c153dbdbbaa611480d061160b 173424 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_i386.deb e75e3990f6c255b11a541535baa808c68d9943a5233d6b486f9b474715776233 23508 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_i386.deb ce1df6d141f94732cab933533a19a60aa92953b434e8159f6d9f3563b02f6e6f 87736 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_i386.deb 8ffe3e8a47bf626ab9d3033f74f6da730f58aea90937e03ee705d21bf13cf837 159200 libnginx-mod-stream_1.26.3-3+deb13u3_i386.deb 0531d9f547c7ffff798aae2772604df6bfcbbdb05a82491a7eed5ed5328ca372 1220588 nginx-dbgsym_1.26.3-3+deb13u3_i386.deb c0609b4b43e3e563fd48e302efcff5be8566edef2b970e3dd67eaf7141167574 83644 nginx-extras_1.26.3-3+deb13u3_i386.deb b625e732e8ed7e23bec09d80ee5f749e05e87078401596edc0dda7fdfb0780ff 13781 nginx_1.26.3-3+deb13u3_i386-buildd.buildinfo 29e01d361534296a0ff16d5b55c3740cef4554f74493cfb68a6f7393f6c07470 664740 nginx_1.26.3-3+deb13u3_i386.deb Files: 12a289aad46adf0d86d8f2b365f0b7fb 37160 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_i386.deb d21e97b21487cb6be3bd24df68be8b66 88592 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u3_i386.deb f27cc5df2dd5637c7e4fdb7403f191a7 44824 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_i386.deb 89362e8b637be238fd23d45034cf56c4 92364 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u3_i386.deb 2a94b3b46cf81ba910aa4a2a7efa2a90 104400 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_i386.deb ce3ad7f26d8058427f47a2a70a71cab2 101628 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u3_i386.deb 02e4c8de762877e4b7a59cc6a6ca92ee 53116 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_i386.deb 36945f5c4a5889f60300d6eb1c2b2e8f 90992 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_i386.deb 5d5d3525e38555e1483b1944f0eb370b 103128 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_i386.deb e95d75dad4707891b1e08e0d082688f9 124892 httpd optional libnginx-mod-mail_1.26.3-3+deb13u3_i386.deb 03aaf6f79f9151ce92fbabacc4b6ffa3 173424 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_i386.deb e9c214c339bef2b7cd74b4421606bd07 23508 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_i386.deb f17cd89e69b9dbe9fc6f1fe34b23e483 87736 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u3_i386.deb fd057e85124aceb9e08fd3809b7042e6 159200 httpd optional libnginx-mod-stream_1.26.3-3+deb13u3_i386.deb 884b927918563bbfe7d1a967784fe3d9 1220588 debug optional nginx-dbgsym_1.26.3-3+deb13u3_i386.deb 248cb7ae3a1a52bc8261294d35aab1e3 83644 httpd optional nginx-extras_1.26.3-3+deb13u3_i386.deb 2360e510522c917ad51138f229e78cd1 13781 httpd optional nginx_1.26.3-3+deb13u3_i386-buildd.buildinfo a366c98f7ca93eb5f4f8587cb7b04c63 664740 httpd optional nginx_1.26.3-3+deb13u3_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmn2WLYACgkQGNGWmfrq ILGUbBAAtSr1NZmn11YcfkskMgAMQr1PSDlCYT2DK+pVwyCM/TnfntibXYXcPmx1 QgVVkQAViwFAlkMhYk4MeVx3gBBnXCnvEXRqgeg7YkILAh5v2h1iiNRHHTufAkeE hmajjCncveObU4rUbRxsHJi0m0J0f6AXbcUlra59XQ4JLTuEjt8b0FGZFUcerId1 su3dDLqz4DJh8PxN6uTw0lvtHeNFT+soIGqjqOA+J8hokWj/fkm/15WUsYII6Pe0 L7xael74fErRpG5ixC//jxIo13jGMHdatSfBXDRc2Zor8wdQyH3OgOYMzx+SrJOM qAESMPpT7SLArviQlXzJJqkqgyKj2h+JXQUQpqkvXottqb/lRsMt0e5qtbIghEea FHpadDbxIPgbZH2YQArGWiLePVQ9Xghw0KKFWpiUcRQuQS4pnefcgo9Ezb6pAh+v LV5iGnMmm9XZJwqaU8b2ZrnvMIbqjSzvlAld4cp8piTyw4nT1H+DyY7xp8FVjnLZ Ikdk0CrqC0oCYDpuqdmKqLcIFhjt/AkEdXghJY/Rrk+Y4zNtLqqvtf/sizG6k9P3 B87XYh9nyco+LhzlqOK7R6unrdhH5fw9xalGUE24j5mHl8dadFlxVx3YS1m6U6T+ EOrVNPgjKDJKXS2QdASdCE54LY+WM7xk7i4TiAgNXDB4tyr5Ibs= =o1hV -----END PGP SIGNATURE-----