-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 19:10:24 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: amd64 Version: 1.22.1-9+deb12u5 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u5) bookworm; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: f48ee7b8be8462ddb6eb7158668a9aff58887789 36776 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_amd64.deb cc109ae80c55086f6d65cca6166427a166728eac 84972 libnginx-mod-http-geoip_1.22.1-9+deb12u5_amd64.deb 8b0c639deaf2864fcc1311102cfd82ede37a2187 44044 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_amd64.deb 9ca1bbb449616e3dad0a7a6a34283a21979f6962 88660 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_amd64.deb 32b500de162c330da493d219ce404f79203f9945 99672 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_amd64.deb 45ce3626f0912b71f8a4bbd5f66b3079a0b5c497 96820 libnginx-mod-http-perl_1.22.1-9+deb12u5_amd64.deb 5743958c365167bfe7ec7ca4410c16c05b75ca58 53280 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_amd64.deb 3374f1571c9ae3bca3409556f7491f551a0718ae 87128 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_amd64.deb db4f236a1367219beb274f89093473d2d78d9949 104884 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_amd64.deb 1b217c32900b571bece57d671d27e144a930287f 119220 libnginx-mod-mail_1.22.1-9+deb12u5_amd64.deb 6a6c3b215eab60c3f340f01f03bbc5b7a40a0c21 171888 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_amd64.deb 31c63043fea33468981fef6f27fa14cc1a906c63 22476 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_amd64.deb 4766c793a2c5725cc5dffe88bcaeeffe69b8f90d 84172 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_amd64.deb 33def52ff078007a516808428d7dd3e0361136aa 144192 libnginx-mod-stream_1.22.1-9+deb12u5_amd64.deb 98acbc4d94d87cd6ccfb0dd84f95fc80b3f46785 1117896 nginx-dbgsym_1.22.1-9+deb12u5_amd64.deb 4655f6cc612d02dc5514ec6efafae68c9612750d 80484 nginx-extras_1.22.1-9+deb12u5_amd64.deb 67a34abaee2b38c0a3421e4d43c6d3b25d76fdd9 14256 nginx_1.22.1-9+deb12u5_amd64-buildd.buildinfo d5bde587fe28bc853324103820122b0667a0affc 528588 nginx_1.22.1-9+deb12u5_amd64.deb Checksums-Sha256: ee36b356852e8962a433a562acd6ce5ab92fe5b97219645e31581f59d92767e0 36776 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_amd64.deb 402eb5df29e0f5cfeffc9d3698470c5b7f88e019b424891a86359021e9c00a93 84972 libnginx-mod-http-geoip_1.22.1-9+deb12u5_amd64.deb c2a98b8cbf81d4487c8caf0aecd0672e4bf0cbc37af89112ddeb53085abfdd9a 44044 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_amd64.deb f21cae57100885b8db0507fb5db549593e3391d7ad20df72cf6586c8a071dbd6 88660 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_amd64.deb a98df709ebbc31a8d76aab9405b8dad44fbbf6bad46a6f367cc107dff95a9b4f 99672 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_amd64.deb e076d94e14c9bc33dcdb3a5b6077a371513e10a2185f1efad63c24c36b1cabb3 96820 libnginx-mod-http-perl_1.22.1-9+deb12u5_amd64.deb cff7605826bd1e77b62d42e639343988ef54a7494077cc7f4459289230a97dc4 53280 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_amd64.deb 6e8d7a5913772c4074e9d0622fe89dbfaddb935189cb832f6df0bf93bbfedbd6 87128 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_amd64.deb eb036a809833f2e32a5baad16265ece1508122482b59ed9bd13522e4e1a97d69 104884 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_amd64.deb a2e568389c24cef7f3cc244e90783cbc5cfb59c41d73738449d3a579b805c61e 119220 libnginx-mod-mail_1.22.1-9+deb12u5_amd64.deb e35675d56b98bc8a5e97bcba95eda746a33cbf7a35c4fa01ca756296c128bfc2 171888 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_amd64.deb 0871908a5f63df3499c239f0d63dad4017bc60dcb495ed9dc71d36a315e59380 22476 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_amd64.deb 4c58322a4b7555992fb573d575488f9d9d58a862fd99ced4065ba0db45fdf34f 84172 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_amd64.deb 00644dc11cfe66ec042915ea362a7b11a49d10196ffb24cdb754ff820f385c91 144192 libnginx-mod-stream_1.22.1-9+deb12u5_amd64.deb 8b55fab498a0ef7b5b208a451ea721faec3976c2bab720c399ba70f29a9d28b3 1117896 nginx-dbgsym_1.22.1-9+deb12u5_amd64.deb 05aecb874bd8ddb32c27748865b935ec045447d6906f864e65c178782d8bcb0c 80484 nginx-extras_1.22.1-9+deb12u5_amd64.deb 1524bc6457d2dccd94fbed0c45e862b2aa8f8d51a7a91b66c55e52b756fa7efd 14256 nginx_1.22.1-9+deb12u5_amd64-buildd.buildinfo 2335e8d02c50f8d208bdd455844a910d6fbd25cc1f9b533285b28200ab47a842 528588 nginx_1.22.1-9+deb12u5_amd64.deb Files: fb1e58a929cde602b9b22506edc51a58 36776 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_amd64.deb cef8c0b23b08d3f4e6010046f9a93e1f 84972 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u5_amd64.deb 8f1043e54d5063a7adce12c74b384b46 44044 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_amd64.deb 1a0df85dcc56c7a837fca77f1df74d33 88660 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u5_amd64.deb 14520c379c0e443610697a4e7776eb9b 99672 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_amd64.deb 8438a958019e22ecd5c12b76a8cf6cf0 96820 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u5_amd64.deb c2ab68567b845bbc6e022068386cf73d 53280 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_amd64.deb 16e92266922d31a6f34d036626c4b3eb 87128 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_amd64.deb b163cc7077bcba0060aafa09cea14939 104884 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_amd64.deb 1d3389862bad7d4f6080ded3ee438d6e 119220 httpd optional libnginx-mod-mail_1.22.1-9+deb12u5_amd64.deb 6beca59e533a020ef91798681fc58e8c 171888 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_amd64.deb c9afc81183cd341a406e3604c655fa00 22476 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_amd64.deb aa6fd70e08e62c4d31835d64b211b5c4 84172 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u5_amd64.deb 01b19b98325ab4044e867098d1b96768 144192 httpd optional libnginx-mod-stream_1.22.1-9+deb12u5_amd64.deb 373eca749f0706b7769c44e1493b2874 1117896 debug optional nginx-dbgsym_1.22.1-9+deb12u5_amd64.deb c4b7058c3259caa75f727ebef971f89e 80484 httpd optional nginx-extras_1.22.1-9+deb12u5_amd64.deb 09b4f680348e71d69fee9befdcebe560 14256 httpd optional nginx_1.22.1-9+deb12u5_amd64-buildd.buildinfo 94bcb2f03b9c9c154cb3f7b5ba670e86 528588 httpd optional nginx_1.22.1-9+deb12u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmn2dAQACgkQPkCWRKsh 20eX2w//f7TOCLnpIroOYNB4FsIF8HUPXtRn8ZeRv+3qpkrqS37Gqw+grOYGtvwI CrSBd/agd30B3vBZB0o++WFW8pQYxHTKcZbYQtLc7U4o939yEd0EicLfaxeVjXdb vS3+Xfl7O3994eaLHjtx6b6NF5bkzeDKGtGtnVRs5RgZXWzi9L9nycR/7fFTVuvW VEQzSD+nqn6vP1PYPlnUt6Kg1k1GoR/BHQr83fyAkx7rUMlF3ReXj4KJ9eVn2p3z BRbLeu/uNjG9Ucm2YMmEfzfGfuolM7nJ9idRSW6lu8GA1Rgj3cVTjKbHYWnoYyQn fR7WQno190MeiPxauQq1EdRVrCvxPWnueXSymRWfbWa4lrf2kUfS5SmM5JL8TzK0 qhGQvLNTjkVDRjFdIO0JPb8HG7NtU8JyVDqVck8EhCsFdgE9gi7MDgmbD4ywCkT/ LamyRkqTt15JQsuGPBlCVzQX7TNF4voLni+VHxhVFOQ3/mzocwVV9zCo9lR9uBjY 1mePShfJesBr8aAKxAWJerTDlxc8ftVNA0nMnqXlsAWDw4GT+qPEcC3HdL41rqPW 9yPAwOTgQO7PlAphmamw04DwuVcGs7liefFMXkXS2RpMc/AETbMj87QkeX4EWwcr TZhhY2UeT1a+F99Ga56fbcjI9cYPioz0QTiJfmKrsEKrNhPiMcY= =lFT1 -----END PGP SIGNATURE-----