-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 17:52:06 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: riscv64 Version: 1.26.3-3+deb13u4 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-05) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u4) trixie; urgency=medium . * d/conf/*_params: use "$host" instead of "$http_host" * "$http_host" forwards the Host header exactly as supplied by the client and may not match the effective request target (e.g. absolute-form requests with a conflicting Host header) this can expose inconsistent or attacker-controlled host values to backend applications (uwsgi, fastcgi, scgi, proxy) * switch to "$host" as a safer, normalized alternative * note: this changes behaviour, as "$host" does not preserve the client-supplied port; deployments relying on "$http_host" including a port number may be affected * it is workaround for Debian bug #1126960 for stable/oldstable release Checksums-Sha1: ed1ed86641a9100ddd51b31561900a56e6ddd419 37988 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_riscv64.deb 607fb9d8789f01ec720cdf3e47ebdd4de66a9fb8 88716 libnginx-mod-http-geoip_1.26.3-3+deb13u4_riscv64.deb 9ac341ecb059e700c46c036df3d3da580f62dce0 45044 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_riscv64.deb 503e7751e57b9bc4b660d6c5c016e14ade7feca1 92260 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_riscv64.deb b9d9f4c35da26ba5ac1b31992b8b208e1fde7160 106872 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_riscv64.deb 345077c9149e7aad86e66afadd93daf8a20d94c7 100668 libnginx-mod-http-perl_1.26.3-3+deb13u4_riscv64.deb 523d930f1b0286c0ba0c1ccd9dd389e7c564aa9e 54008 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_riscv64.deb 179ee757a0cd3d4c7b0d4474ce14616b38978960 90680 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_riscv64.deb 8ec255631d65d9366a62a8562b01e29522930e05 103784 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_riscv64.deb f1354746585db67d2714721a083a7835ceabbdd2 123988 libnginx-mod-mail_1.26.3-3+deb13u4_riscv64.deb df856a463ad481645b460771bd1c8e0ba2bd5cf4 183648 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_riscv64.deb dccd469b1aae93e7db6c33ca12328f9b0fe7834a 23992 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_riscv64.deb e285cbb6b18695868fe2d9914f913372e64ec2ec 87984 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_riscv64.deb 70a132926f06e2418c8d043a9190d10116327949 155092 libnginx-mod-stream_1.26.3-3+deb13u4_riscv64.deb 74222a946b242fd61f4db65726c555aaf3a18a0b 1314588 nginx-dbgsym_1.26.3-3+deb13u4_riscv64.deb 3302ddbfff4e51424915aa28d6c2d74c6b7c7d67 83976 nginx-extras_1.26.3-3+deb13u4_riscv64.deb 5ae5679bac77a659e2bcd169274933a773be582d 13959 nginx_1.26.3-3+deb13u4_riscv64-buildd.buildinfo d69133e58e30d47c41296231f375d32b623b479a 630272 nginx_1.26.3-3+deb13u4_riscv64.deb Checksums-Sha256: bb580fcca85106c35ad2d91bd8ee336b16a4cc8c933323177eeb9230ad474a25 37988 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_riscv64.deb ab44da3a510ddb218979d9018830e93aa036387777771be06e3990c44bae2f7e 88716 libnginx-mod-http-geoip_1.26.3-3+deb13u4_riscv64.deb 83adcd8437afd4956bb2d6cfd2ab9c24a422ae4a10af4d9b196db45df54ac331 45044 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_riscv64.deb 5174c50c303b133986211940d7e84cc052e48c5c9f336a62f4050cd8c3dcfc05 92260 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_riscv64.deb d3bda1ce8d628a9dba10a94ae9ac0ba2da0d63cc4c4d1bd9975ba98b13ecc06d 106872 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_riscv64.deb 6dd2e45eeb6d42587b2166fd9f64a8a9133e86546e209773430ef232003267bf 100668 libnginx-mod-http-perl_1.26.3-3+deb13u4_riscv64.deb 70902c33f7245a187034c72c76dfc439b15a3cbaa865184f1b8535e5145e72ba 54008 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_riscv64.deb 4c680ebef81ccf7825713822b263043f832a72cfff2aa5530c3d31546919936c 90680 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_riscv64.deb 852a9d013f9a8fe415ec1c2a7f4c98b0df4e2463ceb2dd5893ea492c7565dcad 103784 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_riscv64.deb dc95d4bf0258a868e9c66256da9d6a75ab050827588202e7b1bdaa94ac3e14a8 123988 libnginx-mod-mail_1.26.3-3+deb13u4_riscv64.deb 1269c8f1eea95e69312b17262b00968823ee1c96fc02a2b8f9131addc4f5e10b 183648 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_riscv64.deb 3f86ae7444f5a531395c6f746a2a813eee5c4902e339b55eb65a9f13c1de2207 23992 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_riscv64.deb bc94512eea0d344c6a2e7a746e57983df4eab3e41a8010c132142fc232988b74 87984 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_riscv64.deb ccecfe740bc75d5fc657940e4cd9239e009302cd6006c6fc785c1e250015459c 155092 libnginx-mod-stream_1.26.3-3+deb13u4_riscv64.deb bd21e054ea37b6ee6756babaeee63b421c61116bff69d56ac969b415ac13a7c1 1314588 nginx-dbgsym_1.26.3-3+deb13u4_riscv64.deb f3d441cc42554b328c9b5670e741e01ff5cc9a193cfb6298631e83d0193d524c 83976 nginx-extras_1.26.3-3+deb13u4_riscv64.deb 00b4ccc3a4b59dab7ecf4df0ad5ec905e7648d749ee51d9850be14a5400f39af 13959 nginx_1.26.3-3+deb13u4_riscv64-buildd.buildinfo 7bdf4c7afefe845937ee87638c5bf5f162794a8eebb648e4a1de883b47db520b 630272 nginx_1.26.3-3+deb13u4_riscv64.deb Files: f5d45e7c64cbaf56118a2a48649f69e2 37988 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_riscv64.deb 8b32909b93d7fbb928595bd0a8b70f11 88716 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u4_riscv64.deb 4f24869534fbfe660d4589e7c149a136 45044 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_riscv64.deb 6497c87714817974f48146953a499111 92260 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u4_riscv64.deb 8dc3c8eed0714add772010afe6338f43 106872 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_riscv64.deb bb1fa368bcc84570d456d9cadfb6f690 100668 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u4_riscv64.deb a1b349bdaee4b3d91fff2714e7826632 54008 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_riscv64.deb b317fbfd84362193c5ef49074392e321 90680 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_riscv64.deb 7c13cdd25845f41acc16348f8196d297 103784 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_riscv64.deb 0b14f090565036625d5c9740b3eeedd9 123988 httpd optional libnginx-mod-mail_1.26.3-3+deb13u4_riscv64.deb 291eb6a60ac66015ea5ca7c7aed75dec 183648 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_riscv64.deb bc0c34dc075a5d8023a3ff441def7788 23992 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_riscv64.deb 26438159d981e56751478fb78320e222 87984 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u4_riscv64.deb c09c565a8a4e9a965d8811b2aa13da26 155092 httpd optional libnginx-mod-stream_1.26.3-3+deb13u4_riscv64.deb 09779716802e36acf01877252ff8a1e8 1314588 debug optional nginx-dbgsym_1.26.3-3+deb13u4_riscv64.deb def01a276a9adf6057e97f213daa5edb 83976 httpd optional nginx-extras_1.26.3-3+deb13u4_riscv64.deb 7ab9387378d164178596673c98be2aa7 13959 httpd optional nginx_1.26.3-3+deb13u4_riscv64-buildd.buildinfo a890d5bfacbd58c0119892e34a587b6b 630272 httpd optional nginx_1.26.3-3+deb13u4_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBzL0NgzYDvoyHaFq4N3weDMPIr4FAmn5GYAACgkQ4N3weDMP Ir4R0A//Wqmvp2vLIXQMx/Ku86Qam1UugjNrXSHR6QiKgtRoeZR5B9rLnFWF8O2B MWNUhr4HRX2VgXTJvmV4s058+Gyl35TVT7NboSvAqiO85UVWmEIwQVlYxjrnq+lk 5s+Urpd5qK1vSopXXY+9WlAThiW1RM4xw6wP6/j+OxZJNAtCbnNgbvWrgahLeSqK KhMWyZzBPsgW8bULWZ4JLp+Okz5FS0r+B6kIAMaw+O1OY2SYGyH+Ng8h4Vm8Vc75 S5mHg94gcE9OkIOpnYBP4ZxVZTWraDxMOOAN0ZJrJn/wC6U/iPIt3ugC6TYE0l7m jiz4US+oaW0WD86EU+b1hdCUgI11OjhJyyRwpYEiU9j7KMlShMlsU1CbrvggXEHb e+WsmugSgEgQfApk1+yJDGFpzONPeODXV6MoCuH44HyqACzjF0fax1LP5CA/AOlr 42zV7LVCptmj/Lk3hXPjHsue4uVwjKzH/ThMECqnASAibPpRdw3vJP7+vJbFpeWE w5F0plf1EQIZzhPv7e0n3G5Pc8TfdTF+IhQjOZzdu0LU/o9L3OJG1PUoufWI4FRS KsriMfhxanKKhqotWxcZDKvW+RIN25mY8bt0ziLEgrYt3swmIJOe5HJpH/3WOyPh 2TtPK10/clX6nR/MZ0lIoHt6oNckVEsZmVuvzSuDkznmcgZIRDo= =Dhqs -----END PGP SIGNATURE-----