-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 15 Oct 2026 01:08:48 +0000
Source: nginx
Binary: nginx-common nginx-core nginx-dev nginx-doc nginx-full nginx-light
Architecture: all
Version: 1.26.3-3+deb13u10
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Description:
 nginx-common - small, powerful, scalable web/proxy server - common files
 nginx-core - nginx web/proxy server (standard version)
 nginx-dev  - nginx web/proxy server - development headers
 nginx-doc  - small, powerful, scalable web/proxy server - documentation
 nginx-full - nginx web/proxy server (standard version with 3rd parties)
 nginx-light - nginx web/proxy server (basic version)
Changes:
 nginx (1.26.3-3+deb13u10) trixie-security; urgency=high
 .
   * Backport security fixes from upstream 1.30.6:
     - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias
       after a rewrite changed the URI.
     - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating
       string expressions in HTTP and stream modules, adapting the fix
       to the existing ABI-preserving script backport.
     - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate
       from request body data, preserving nginx-dev ABI compatibility.
     - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys
       during key rotation.
     - d/p/CVE-2026-97205.patch: limit pending asynchronous operations
       to prevent the request blocked counter from overflowing.
Checksums-Sha1:
 7f1053534d52482a4fd23500bb6e6d2780d45c7f 111828 nginx-common_1.26.3-3+deb13u10_all.deb
 4fa35864b35480b850e0ddb3731e53d3d69aedf4 85052 nginx-core_1.26.3-3+deb13u10_all.deb
 6820c6d7efabaf51a6c230303a03a4465fb5275d 197992 nginx-dev_1.26.3-3+deb13u10_all.deb
 6ad1b762bcd1fdca503636b78ea3de918ff7402c 93156 nginx-doc_1.26.3-3+deb13u10_all.deb
 8b43da20872cebf50af5901a9f4a2d955c33d3ca 85072 nginx-full_1.26.3-3+deb13u10_all.deb
 7ef920cb708a4890daced03a705ada21fd8ec72a 84816 nginx-light_1.26.3-3+deb13u10_all.deb
 6269a3ed10cea19032a54a18343ff43739ad2a52 10156 nginx_1.26.3-3+deb13u10_all-buildd.buildinfo
Checksums-Sha256:
 410d048889786394e5706a73f22ee1405b65114eec798881c4a7cfb119026153 111828 nginx-common_1.26.3-3+deb13u10_all.deb
 1de27457d3c18363177fff6cf4ac29d234f796c3c99e470eba40fb91aabe9ae1 85052 nginx-core_1.26.3-3+deb13u10_all.deb
 b31b7b5b52577c2c2be026098a53835d5325ba1bb1786b42f838d5d5b07c8eef 197992 nginx-dev_1.26.3-3+deb13u10_all.deb
 01d9c844e44deab3e412477d8abc4b2d6d526a38babe3b0be42b055d59e8063b 93156 nginx-doc_1.26.3-3+deb13u10_all.deb
 45294e9cc37a43d38d675574b26e2e4df4850f8ede12dc45f40e3fbeab69c842 85072 nginx-full_1.26.3-3+deb13u10_all.deb
 09b778e694eb7504aa7b74a986d378003882be8ab394591a2df0bb9cbbe8c3c9 84816 nginx-light_1.26.3-3+deb13u10_all.deb
 d9dea138fde1b4bf8a195a94259aad5fa92cdbf81e94c46cde50fce1e1d070cd 10156 nginx_1.26.3-3+deb13u10_all-buildd.buildinfo
Files:
 715cf646e98900e986cdcbf1c8be5d0e 111828 httpd optional nginx-common_1.26.3-3+deb13u10_all.deb
 ffd15a650ebe77be19f1b9b2e5522c0d 85052 httpd optional nginx-core_1.26.3-3+deb13u10_all.deb
 18c6d3e3f89827a216edfe4c64b630b9 197992 httpd optional nginx-dev_1.26.3-3+deb13u10_all.deb
 9d447ae7ad787b223c1be7e28a8b0265 93156 doc optional nginx-doc_1.26.3-3+deb13u10_all.deb
 2bbcc8fc1b17b46ef2f0af78d39e048f 85072 httpd optional nginx-full_1.26.3-3+deb13u10_all.deb
 6b578d2bb920d5896eea51b838a9f29e 84816 httpd optional nginx-light_1.26.3-3+deb13u10_all.deb
 631e1abd01e589594ce54230c8330d2d 10156 httpd optional nginx_1.26.3-3+deb13u10_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=4aoK
-----END PGP SIGNATURE-----