-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 01:08:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: amd64 Version: 1.26.3-3+deb13u10 Distribution: trixie-security Urgency: high Maintainer: amd64 Build Daemon (x86-grnet-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u10) trixie-security; urgency=high . * Backport security fixes from upstream 1.30.6: - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias after a rewrite changed the URI. - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating string expressions in HTTP and stream modules, adapting the fix to the existing ABI-preserving script backport. - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate from request body data, preserving nginx-dev ABI compatibility. - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys during key rotation. - d/p/CVE-2026-97205.patch: limit pending asynchronous operations to prevent the request blocked counter from overflowing. Checksums-Sha1: a4b009a481bb30cf9b343ba792bc957898fbfe76 38100 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_amd64.deb c5329c0ad2ab954bfd98d48ed2669c279f3229e7 89768 libnginx-mod-http-geoip_1.26.3-3+deb13u10_amd64.deb 3fd3e2a401c75a769c92aaf4c916064035caadc1 46408 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_amd64.deb ee1012af135063642e14ae1e6cd9db7c0fc0ca1a 93512 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_amd64.deb 5f9ae6c544a6b3c6800b53fe4a29d441f251a90e 109636 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_amd64.deb 6e1e0aaea3ab4511fceec161506740b649a4cba8 101992 libnginx-mod-http-perl_1.26.3-3+deb13u10_amd64.deb 99ff53efa57e69aaf30bbfa0c7e14dcb0edc3a8d 54412 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_amd64.deb 73996802045e1907a4a2d30f26696db316de7fa1 91996 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_amd64.deb fba5fe1c5a09f4f5d7ad5209c9482b192b3eb204 105144 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_amd64.deb 620cd402f3c4d424e0ea5f5835b6d87f6213b28b 123812 libnginx-mod-mail_1.26.3-3+deb13u10_amd64.deb 6decd63073ff56088f58d14f7ddc23fb2f1c1418 188400 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_amd64.deb 67ac00ebb3fcbce6c2315267c8e64bcd2bd131c6 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_amd64.deb f3399bad73fa2f86021c237a1c991dc2adfa3239 88976 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_amd64.deb 801acb1a6644e4ee660c3cc420a8ffcaf00744f0 154380 libnginx-mod-stream_1.26.3-3+deb13u10_amd64.deb 079dfd6ba3f3bc48e513acff6889e8062c1a676b 1349792 nginx-dbgsym_1.26.3-3+deb13u10_amd64.deb 63d58532f196072d313c00c87455309fffcd60d2 85200 nginx-extras_1.26.3-3+deb13u10_amd64.deb 0a20251769a7c877eab6814f4703515ae122fd27 14331 nginx_1.26.3-3+deb13u10_amd64-buildd.buildinfo c43b500e023372f4b7079a2f2d5ca6ba538b389e 613548 nginx_1.26.3-3+deb13u10_amd64.deb Checksums-Sha256: 81599270f9f58a35bb610a5b7fd0b35eb583044e8faf4787a0a49f85533b3656 38100 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_amd64.deb a1e9544fb89c100f46dfa655bb36002c6da30882da855547e63ddd602c36cc2d 89768 libnginx-mod-http-geoip_1.26.3-3+deb13u10_amd64.deb c79710b8a1f076e956618269e4c595aad1afde4e46dd1cfaa4e02c8b991061f9 46408 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_amd64.deb 5146e4eea16667d3ad472445dee8d97b0d8d3a258b5209d7c33088e9f8264098 93512 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_amd64.deb a219590e13b876c4e8910cb28fff929c6c5adb3eff1ac8c3774a181c38fa408f 109636 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_amd64.deb 3e4aaae92253a515f74d6d40ecfab4162573c84e6d9296b74cc462058fb4f3bf 101992 libnginx-mod-http-perl_1.26.3-3+deb13u10_amd64.deb e52352277601a1ecdcd0e2c21d9cf959b023c066f264370c3e697ff92cd1610c 54412 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_amd64.deb 791e43b38c1a57a287d0da7ad40e43dfa7eddf80fe688ec9e9d7c1e050f98cb9 91996 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_amd64.deb 0388cd5ddfc39d1f97b9f0a822b45dfd576fec37ad9ce266c32922d124160f32 105144 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_amd64.deb 0060cc92eb0ab10aa328f9ec461e21af85f60492449cd81248db0b173727dfb0 123812 libnginx-mod-mail_1.26.3-3+deb13u10_amd64.deb 65a0da38e81fe3ca4cc278f56e008ebcf33ee3b19256f5e31a84703a92d1ae7f 188400 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_amd64.deb e96fc3923b6c9e880855072e64038060d51cf36230813c71f46b27880f607fd3 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_amd64.deb bb8adc8ede6eb38ced7c1e12645d32defa03cf64216dcceb525d2141271c6b33 88976 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_amd64.deb ae6be5d99e8c07e11a80a5b8802eefbcd0f915023395987b094fe13a192adc10 154380 libnginx-mod-stream_1.26.3-3+deb13u10_amd64.deb 722337d9ca350c431b416729f9a9c3cb9c0b90695ba803229fab845525eb54d8 1349792 nginx-dbgsym_1.26.3-3+deb13u10_amd64.deb 3e7cf47d9848ed1cde6da1c4258aa8bbfde3c3b1530e89e404f491f9d5fd3c32 85200 nginx-extras_1.26.3-3+deb13u10_amd64.deb 47daac5f389c86796a94488522e1d676ec4f866674cb4b76b702bf771a0efb85 14331 nginx_1.26.3-3+deb13u10_amd64-buildd.buildinfo 222f1f296cb91a67323fdca0e37c4f34a7be78d14de043f15b2f76acdd8750a9 613548 nginx_1.26.3-3+deb13u10_amd64.deb Files: 793e5b6609be794fc192a8bd9fda96a4 38100 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_amd64.deb ec35b53c70bb4fb3aa5af533147cc74b 89768 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u10_amd64.deb a2a19571887310de599351d843c0dd2f 46408 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_amd64.deb 655a78cd9639e7808d5acac8034be6e6 93512 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u10_amd64.deb 2c6b504a12eb3465b31c679d19d3b690 109636 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_amd64.deb 09371b25b4be027a41739908786275c4 101992 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u10_amd64.deb e5accd50b02e5905896228fbdf738897 54412 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_amd64.deb 4bb998f72207a6edacf15bc6af2647d9 91996 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_amd64.deb 92ba6b3f2d3da2735fdb0bfaeb32e3b6 105144 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_amd64.deb 1f88c7fc1a53e767cfdc011020b7eb46 123812 httpd optional libnginx-mod-mail_1.26.3-3+deb13u10_amd64.deb 5806b8a54e92f3332838311d58092db8 188400 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_amd64.deb 7d501133eb7248eebbff2cade046cdac 24024 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_amd64.deb 23033bd603c3cd8dd1b3dc3c0476fd4c 88976 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u10_amd64.deb a5b5f13683f374903f23265f3d5d0e78 154380 httpd optional libnginx-mod-stream_1.26.3-3+deb13u10_amd64.deb 484939bf6e2239760a446b854e7e44b7 1349792 debug optional nginx-dbgsym_1.26.3-3+deb13u10_amd64.deb 782ca9f279e4d7aa5ff821a5dcb88093 85200 httpd optional nginx-extras_1.26.3-3+deb13u10_amd64.deb aea3ec1d5f89c9f696366b64e6abf0be 14331 httpd optional nginx_1.26.3-3+deb13u10_amd64-buildd.buildinfo 2a5d15a6a4efda0833136e08725c0e44 613548 httpd optional nginx_1.26.3-3+deb13u10_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmrYmlwACgkQf2INRiCd aWJ4qw/+N9UITgfoFWSRlBrXSGJhId18RitAhM8R3NpCJA6zES0s2Fg2VP+FQOoE xuja1/vRgpuaDXBmtHWiIvAwDjZSaFs0CIzlVn2QmH92CO0A9IF8tQQqdthNDfzw i03PyJLdYFvV6MX6rUukCpOszhFKPgslxRt52VfJ9r+Y6s4d4vSBV7cvrCxCJ//T FfjnWQe85Oa1LD8MTQm3rd4reA1cXbPQIGUSPulqfArpeSTtsXwuw7+amyQEwirB EJIyqCrXcj/u1pf86Pus6ProZa1Xrwh+H+nOzMP/4iCUwoDFQStK2Y6EIGHKB1WN WGDy9fFXjRX/KIPdX0Q0QXs39mkkKMoU7OMwO43MyR2We+LVmmGEww+wSsIbAWVQ q38opBzoi491HwHUhz0WJe74s5QU1Z4qwyMOQOtKdNkC7J57cU1RibYwvq1H56hq goPoGG2J9ogSXfWfPgDhoT8vT4hbPV0qMpuGstXA+zsCbcvNryVyT1oHTaHc3EMX 7LsWyMCTNSzYvGW7z2JE4u5jSLmCY7XmKoWLkxqYaazOc9mRX/5Tl0cMUUfq1P3t CHH3USXMWGhEnTlg796YgwPecIQkd61oTvQhjlVyKrcRvrEq1u3oSgpmzwUQYtaF 0QkNBQans7GjCYRRKoRzfTq5aL+rXvJwKjK5vzHdEG3fVSxPthE= =B+/h -----END PGP SIGNATURE-----