-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 19:10:24 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armhf Version: 1.22.1-9+deb12u5 Distribution: bookworm Urgency: medium Maintainer: armhf Build Daemon (arm-conova-02) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u5) bookworm; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: e765137dfc5931879db4e7d9aa7c9668aeb2c5f3 36888 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_armhf.deb df289b1cf5e03743f467ca1f746ae2756d32427c 84168 libnginx-mod-http-geoip_1.22.1-9+deb12u5_armhf.deb 8217bb7579e4c423530fa91ac33ce62ea056e692 44280 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_armhf.deb 253a8eb512dc88e0831fe941ea6a9086e3f5b532 87548 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_armhf.deb 9c9b04cda71b4ec780d2627743d289ea56a02ac4 98716 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_armhf.deb 5068e7bf67d0808ac1e7f429f829168c05544a44 94388 libnginx-mod-http-perl_1.22.1-9+deb12u5_armhf.deb f5b90dc5d095a835b0d66630f5fcfe8823c5956d 53104 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_armhf.deb 13ef3d30e9481c379c0d3a4ed321e59dd2f94277 86024 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_armhf.deb 95c7691f2d724b176fb03a8dfb50e74956501baf 110068 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_armhf.deb d4873bb768747a4b12f97e9add469decd78f77b8 114620 libnginx-mod-mail_1.22.1-9+deb12u5_armhf.deb 7da6d69d5c2b31742345b78c0df25e9841b82589 175408 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_armhf.deb df870d7094ccb34bcf3377af8cabc6e133132de7 22716 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_armhf.deb 2eac20fa40929aac86ca21223c262ebd521fb237 83540 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_armhf.deb a33009024055f181d7edac9826f911217655f150 134480 libnginx-mod-stream_1.22.1-9+deb12u5_armhf.deb 2abf7fc1a0f65125a94a5cf49b8f43eeeff7ab32 1117736 nginx-dbgsym_1.22.1-9+deb12u5_armhf.deb bf4f95df9fcb89defae3a9abc2c4b6a87cbaa84e 80484 nginx-extras_1.22.1-9+deb12u5_armhf.deb 2ed342e235f665ca38b03819b516c168264dea35 14091 nginx_1.22.1-9+deb12u5_armhf-buildd.buildinfo de97e08b5a35da4c418fdeb0ab23fee690b131a5 472104 nginx_1.22.1-9+deb12u5_armhf.deb Checksums-Sha256: 1a42154ecd1fd8ef08ce7b30a269d7df612c6c37b0585e26bed8c7e82ec14e70 36888 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_armhf.deb e7e60521faf67f10da86f2782799cedad61c78b736dd4e13836d6bdd11fcdadb 84168 libnginx-mod-http-geoip_1.22.1-9+deb12u5_armhf.deb 3d763b0d470c016f90022d01fc5bcd68effa475812053997a6bc4ba00fd3efbc 44280 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_armhf.deb f21d3dcf496266a33b75cbecaea064cd81a32b1de51715608bac345de003ab8e 87548 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_armhf.deb 3925d596c5e1fb16e9aaa3cedf8051904092ddd178371f18f20dc9c18e7d9bd3 98716 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_armhf.deb 254bcb244a329b544f6621d6f5190ce5102bb23036b225eeff5de6931c822480 94388 libnginx-mod-http-perl_1.22.1-9+deb12u5_armhf.deb fcf2a59f2478ecfa63edf6ce267672e404c5bd4d40b093510527573af97e1dcd 53104 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_armhf.deb 1860771458579871dec9ac68039fbf02cdb96231cf8cae300972c0a4fbae4bae 86024 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_armhf.deb 0ae4b84fe47e18d57fda3e89faa9c0e53507c594dd10f1c62c67caf4bd16fc2b 110068 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_armhf.deb 23875958259357ab6f48f3f5760cd9c349250130eeefee7472a8b27ce9ddee2f 114620 libnginx-mod-mail_1.22.1-9+deb12u5_armhf.deb cfe5d302640486426b9f05f6c9499480ecd0f993087e6f56ded3de678071eaba 175408 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_armhf.deb 29621fd43d8c7235612ce6859c375dd1952b00b4f0278626e7f3b160aab70af3 22716 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_armhf.deb 4f4d033d3dbd2e987a29afe400c3f5b0055ffef13e3c94aff674c9bd59fce59f 83540 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_armhf.deb af424f85e10cdcfa638c7533cd9b6a9dfc321ab9271e0d2f15a06af5845bee48 134480 libnginx-mod-stream_1.22.1-9+deb12u5_armhf.deb 8706fd5d3e4171983827763c5ef1e535fa1f9c41d3e75b735f92c3aef899e995 1117736 nginx-dbgsym_1.22.1-9+deb12u5_armhf.deb 1d9f1eaf4a4659b389f3fb0554fa2b262fc50db8b790a98bd2588abdae57a8cf 80484 nginx-extras_1.22.1-9+deb12u5_armhf.deb ca8f7012e1f05efda675c307b0502f7c24afaa187a1c09c6bc37f80ced7b6680 14091 nginx_1.22.1-9+deb12u5_armhf-buildd.buildinfo 85d6fe01ffa98c4dde55adaec76133e32df6c30eb79f7e6e7f50315f1c22af76 472104 nginx_1.22.1-9+deb12u5_armhf.deb Files: 12c46d91e08e9a7007c9366d8a1a9c06 36888 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_armhf.deb 0e45ebeb5b8bad2f37252f63f0133b85 84168 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u5_armhf.deb f7b181b607f575992a1070200e4ba82f 44280 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_armhf.deb 3f52203676a3a318689dc9e82d4c2d51 87548 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u5_armhf.deb cf288892326900435697e21c6140b62e 98716 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_armhf.deb 8d7ee9ee12511e1a460b45b284e31a5b 94388 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u5_armhf.deb 52dc5e5a4c985ab5b5aabbfa0cc15692 53104 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_armhf.deb 1f5e142936355490eccd9227cc908ab8 86024 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_armhf.deb 1a8515f6006025a3babc947a4103708a 110068 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_armhf.deb f27681ec13efa946c28402b1b5adae90 114620 httpd optional libnginx-mod-mail_1.22.1-9+deb12u5_armhf.deb f655f783f26dbc64d00808f0bb886803 175408 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_armhf.deb 8a3e45780d070dc863f2d5e57cf5c5cb 22716 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_armhf.deb f963c823e909dfe1b72533f17e15f72e 83540 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u5_armhf.deb db433d2b4911beacdf3f5849025bc914 134480 httpd optional libnginx-mod-stream_1.22.1-9+deb12u5_armhf.deb eea3c509e03aa11ab7aed112e06a1f00 1117736 debug optional nginx-dbgsym_1.22.1-9+deb12u5_armhf.deb 3fd3d7c66f058fca72fda7385bfc57c6 80484 httpd optional nginx-extras_1.22.1-9+deb12u5_armhf.deb 605622de67244dcb79059af452873c03 14091 httpd optional nginx_1.22.1-9+deb12u5_armhf-buildd.buildinfo 83a1203fac669802f37bda1a0941a0ed 472104 httpd optional nginx_1.22.1-9+deb12u5_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmn2c6oACgkQOQKMdMnE H5OB9g/9GKTpy6ahqerKGOxj6+fbAVBIYUb4akYQlAbCPaYfn0RP3LxVWHi/Xc79 13w5rYh61AHJ9Dmn+hoLRc/ry+9P8xJ46+J6ZVu0f8O+0h8cYJNdcd8tjY97es3G QgQYC8yFpEmW8tcgzKnghGGR9z7lAh2wyf2AkMRC/6LI7BgzNcF/+3heqDd4XFF2 5feJSeGFmcpXFYS4yImAk4zhcqqb2mdRnSBAQo5zcTf3AidU0Ve3PV9/fMuVT+03 T5IwjDIV/RNnFC6LTQEbpa3L8Z1TnoydNSumNW9/ySs6DB0a2kWaEmwYXvNY1JFL 7UF5UKuNwEFTdM+A7oNvQdT1mpVMrBXUPR36q1pLE3/lq1oYaU2PYUFK69eqfa33 mO18MPOFmJvuszuJu8dt55RGFk25vRmi5ezYFlDC6kjwyLt9s3o2XZ9a9vlSDmJU YjFznsEz8rXIewSqiXtQRqMpGAU55EcpTJq1gskFyJ+6DYpWBa/rT3tM7F+L3Uva oTArCZC3584FCk2fMoaB3TVr+oy7kaFvaGqVf7ZD6QGg10HDacFYtGxeGAclj84K rzMNtuU2TK/KKgUbrwqMqgeY+31H+f9XtDShDmvowdbty7iOyw1wCjiYSZXscW75 vYZPNEi09ePSnJ7+fDfgwDWcSBGkm5CdFZ3tCywAc3mGYgTJecU= =MQzN -----END PGP SIGNATURE-----