-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 17:52:06 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armel Version: 1.26.3-3+deb13u4 Distribution: trixie Urgency: medium Maintainer: armel Build Daemon (arm-ubc-05) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u4) trixie; urgency=medium . * d/conf/*_params: use "$host" instead of "$http_host" * "$http_host" forwards the Host header exactly as supplied by the client and may not match the effective request target (e.g. absolute-form requests with a conflicting Host header) this can expose inconsistent or attacker-controlled host values to backend applications (uwsgi, fastcgi, scgi, proxy) * switch to "$host" as a safer, normalized alternative * note: this changes behaviour, as "$host" does not preserve the client-supplied port; deployments relying on "$http_host" including a port number may be affected * it is workaround for Debian bug #1126960 for stable/oldstable release Checksums-Sha1: 5a04846671d997817fad408210a51502f8ed9cee 38380 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_armel.deb ffa48349d0044f0dbf4f8e061badb238f75436f0 88624 libnginx-mod-http-geoip_1.26.3-3+deb13u4_armel.deb 49cc88eaf768f32315b8fe85a20c1ae9a494ad73 46208 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_armel.deb 9d96bb8365ec42230302154d1d765ecd9605872b 92620 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_armel.deb 1e1385e3a862a600c3e8bd0e8dcc09860bdded49 108356 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_armel.deb 37ded906cda83de17e66be21aeeb8f51d493859e 98448 libnginx-mod-http-perl_1.26.3-3+deb13u4_armel.deb d96ceb7b6a348f17f7b2e5b64395b34bb8e76249 54436 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_armel.deb 39754a8d250df77f0e167a6a1e9551166463210a 89852 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_armel.deb c036e12ce8c4afb2d170894538b51c5d6595a322 109844 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_armel.deb 0f4400e0af879b73b0b7e2616ff32d97af0148d2 117628 libnginx-mod-mail_1.26.3-3+deb13u4_armel.deb c6d5002132e8340f51a5780d14a8beb43c49b8cf 188812 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_armel.deb e6db7541ad39d7b60d012f309d0d98bf7e8ba481 24536 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_armel.deb 83b9eae4d4442e1109c7697e71e3bca6c0fe478d 87944 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_armel.deb 59d4aa34f41d70a6b1bad16a3e56c61df931a1c4 142016 libnginx-mod-stream_1.26.3-3+deb13u4_armel.deb 345fcb878bec0b278ba0397cded8c0375d4f0149 1320644 nginx-dbgsym_1.26.3-3+deb13u4_armel.deb e39081f908ec8fb45f246eb1381eb9da888ef8e1 83980 nginx-extras_1.26.3-3+deb13u4_armel.deb 388a41bc47945f28fc6de1d47ed98a6b9735ed6a 13774 nginx_1.26.3-3+deb13u4_armel-buildd.buildinfo 04d07580695a94dcf27911a3bc8da905ed5fd071 537480 nginx_1.26.3-3+deb13u4_armel.deb Checksums-Sha256: 6fe0eb9d78c200fccceac6f83976dcf9441e5ea9c6d5ff1d0653c2361495a84b 38380 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_armel.deb 32c7810d2e4f419acd3899cfca9a01eba80d92a71d98433f921be14b24dd46d2 88624 libnginx-mod-http-geoip_1.26.3-3+deb13u4_armel.deb 2df8bc2ca5c4c78a9e69d5d3294a4f6efc03bed924de5b7d38dfe2a377942576 46208 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_armel.deb 9e78f2b62dd65d9c8d492139ba03c25740966479b2e0efffbd5b142eda35cbc5 92620 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_armel.deb 528d34ed4a7aaba29ba55bdc6cdbab84212ceed4b3037a619b49faf4a774993d 108356 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_armel.deb 0c1220bca4735b9969e26bfe122bfbf3ed17c9500d5e30ef68c3e27cd21ebc25 98448 libnginx-mod-http-perl_1.26.3-3+deb13u4_armel.deb 35dc61e6631780e169576d4eb7103dde6a2bd0cbaaa823db62d4adcb1beed181 54436 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_armel.deb 9619e5776041ea393dc5c334bf1b041136cd00d2a576e7097e25dff55f8c6d83 89852 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_armel.deb 6901be90a427236d320730a7a1032aea14f95bff335da7c0175c98066d86b851 109844 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_armel.deb 5a0618437b41052e978cb1d9dae1e27217b6e48b1d4ef6bd1a36a7ced19f33cf 117628 libnginx-mod-mail_1.26.3-3+deb13u4_armel.deb 5d5b5e26e2a939851a82791480573c37a77a74d6738d3f4181bcf40a80b5a8a0 188812 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_armel.deb 5bc8edcd7b750e7d9e5a86d6ca602917cc94c13ae93b1bd161113b39b71f4e5c 24536 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_armel.deb ae5bd923f783a02d90dbff38372d75e9d2fca4f94165e3d8f95ebe1314528475 87944 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_armel.deb 1225737aec82b9886bf61bdf2eb11bf4348f1ba575a36c45977848ddf476653e 142016 libnginx-mod-stream_1.26.3-3+deb13u4_armel.deb 7b307da8a51d58734d8396d66dd2c16256b8181576f5f8aff214d9268bb3b8d0 1320644 nginx-dbgsym_1.26.3-3+deb13u4_armel.deb eaa7d29fd4ee65296561b58b8d1fc6ccf7b57bbd082bfa46f69c3048615b78d2 83980 nginx-extras_1.26.3-3+deb13u4_armel.deb cc15e4c33a32b0d41b32e779ebe1f2190a7055c2bbb7479b6bfa7d0caf3562f8 13774 nginx_1.26.3-3+deb13u4_armel-buildd.buildinfo b5e2c21bdfd8460aded6cfdc759c97d5e6c14d1e1ef009c65ebfaf58dd1bdd87 537480 nginx_1.26.3-3+deb13u4_armel.deb Files: b91b8107da7449cd3de753608e3d9566 38380 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_armel.deb 59c79ba9e29dbc37c96fa64b140472bc 88624 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u4_armel.deb 1725da2074bea1ddcebf41e182b60177 46208 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_armel.deb 706c734256a89f8b07d1042ee0adcf12 92620 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u4_armel.deb 2204e59a3742dcd5875a51ecc3cfda7f 108356 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_armel.deb 05b59982bc7cd3beaf46787b746e489d 98448 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u4_armel.deb 58bc4edaad2b445f982634d1773b363b 54436 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_armel.deb 056918daa6fcc49403b940933fee1dfe 89852 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_armel.deb 05f2416efc0fef67bbc71f6b3efa0224 109844 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_armel.deb 1fb3ff230d1980b1e841d70ac99e8a1f 117628 httpd optional libnginx-mod-mail_1.26.3-3+deb13u4_armel.deb 93904d76001185bf3847097c39f01fa2 188812 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_armel.deb f35e2f97540ccf0b9efc1875b7b3cd73 24536 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_armel.deb febf55cc991a14310265452f60ca88bf 87944 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u4_armel.deb 222d32314006fd74f27ac6ea2664d63c 142016 httpd optional libnginx-mod-stream_1.26.3-3+deb13u4_armel.deb 3ef56e1569ba67e7ca77bc61ef4c78da 1320644 debug optional nginx-dbgsym_1.26.3-3+deb13u4_armel.deb 0d390bc0b8abfbd5ef9c7db2bfc4c38f 83980 httpd optional nginx-extras_1.26.3-3+deb13u4_armel.deb b11f112b1bd8b951a5ab119fa7c80fca 13774 httpd optional nginx_1.26.3-3+deb13u4_armel-buildd.buildinfo 5cd261e598b72c5da902b423f4761e4e 537480 httpd optional nginx_1.26.3-3+deb13u4_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmn5Fv4ACgkQnwznazfj XTpRkA//VS2/CHNML/wNcZkIWOUb52+R6Cn7Dxh0PmWA0y6sBBhIlslYZMbFsfiK 1UKqVTxR/N3vZcoj6fHe0AAHMGFz/NHptlLy2kV+uWNaj0UWNKs4FbdX2jv0Kunt DjVuIn+297q/PsuVXUu+wEH09x8xraLto+3CprxEENjUqXsMSfeXMX8+nFtSMll/ HjQink2o2Rb1JPnT8eK289+4HzfGM3UqMdnEwPFoCgozQFPg0xWsyOkNOFSkjgZJ m92LVhiGTjHd6xnX1yoxrhFwSk+SVpK6FyU4Ztb9Aw9Yxpp6Xcks9aoH/WWmrY1/ eKV1qQ6R++wxerNb5cC9BetM+OkjBsbxDd5ZBHy5AAxQLbdfE7HS64bcthf/2kEL ZLuiKK8mz1gQfF3E1Qesv/H2aFslmHj10BkwotSeL8th6GlubM8imGU6ozzL/D8h 7v1rnwzXacGH/3zjO826s9IaZU+1oXdM81niYtnu3io6vZEq+jhyGLl5KwnLsBwb GGYHfZBPHvfJPNH0od0mctb7sfRh4Y6R6/YLFr9FuzJQkIkboSj9OICJPbxX4O8E tPEflv2W3ivKGu0LOl1R40s05AngQmU46Ykudn5JlYUTJ5kd99MxxN/pEqnbZA10 WHSvK+fi5Wi7a6HQve886OYOQlp+E3GI53Ud+I/D4Vb92tYsaqs= =fjyX -----END PGP SIGNATURE-----