-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 01:08:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: arm64 Version: 1.26.3-3+deb13u10 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u10) trixie-security; urgency=high . * Backport security fixes from upstream 1.30.6: - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias after a rewrite changed the URI. - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating string expressions in HTTP and stream modules, adapting the fix to the existing ABI-preserving script backport. - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate from request body data, preserving nginx-dev ABI compatibility. - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys during key rotation. - d/p/CVE-2026-97205.patch: limit pending asynchronous operations to prevent the request blocked counter from overflowing. Checksums-Sha1: 505af4d38cdff3ccbe8971dcf387c959d1018e5d 38064 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_arm64.deb e1ff0b177ec688275c430b4bc22147e35ff35686 89872 libnginx-mod-http-geoip_1.26.3-3+deb13u10_arm64.deb c28a5647e791906d86baafe11ce7a79dca8a02d9 45540 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_arm64.deb 60fb5e811a701824a1fe816a23d456d6a41b1703 93120 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_arm64.deb 442b3c6cc1baa970a75c31411b56be6cf08b752e 108216 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_arm64.deb e63c9295908af574674ae41bd2a305e9b1e35dff 101120 libnginx-mod-http-perl_1.26.3-3+deb13u10_arm64.deb 0f107c9fe334c0ea413182733c94aa4b4edd653c 54312 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_arm64.deb 766b40166527fc7d89a3fedb45766a8594d5a212 91876 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_arm64.deb fc2792976b9486ced56931bd261a3c395a04ca8b 103512 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_arm64.deb 38e3c25c2588dafb8a50ed7402e322bceed1a89d 121156 libnginx-mod-mail_1.26.3-3+deb13u10_arm64.deb b5d9c7953f7489196b8979679f9cd1d083b065a9 184740 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_arm64.deb 6e94a8701eda83288361d85b2935c72a8b85c879 24096 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_arm64.deb 0febdc32de5934a0101aa4f11e6f641d4b8da4d0 89032 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_arm64.deb deb0d1bd0809ade2b04fab1bea209d25e2884502 150116 libnginx-mod-stream_1.26.3-3+deb13u10_arm64.deb 3f33168387025fa575b326dac2f2038c6efb1ae3 1313480 nginx-dbgsym_1.26.3-3+deb13u10_arm64.deb 5d1d04c7d4f38a2cd4bbfe1efeedddb08f299023 85200 nginx-extras_1.26.3-3+deb13u10_arm64.deb e31d5377d0e8cb166e5770f4c7afbbbaddc96184 14315 nginx_1.26.3-3+deb13u10_arm64-buildd.buildinfo b58e991ffc87c6b1782313ccb04b1d49db59ab19 572680 nginx_1.26.3-3+deb13u10_arm64.deb Checksums-Sha256: 2c078cf5c1c629e4605f8a0dd8980301f526248e0b7a68a24c9952e77f888392 38064 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_arm64.deb e2c25d340ffed1ce39da0e357ba1c2853195a76ce1ee39e5a08d214bf8e2a9f8 89872 libnginx-mod-http-geoip_1.26.3-3+deb13u10_arm64.deb 814c27884c658df03572571f4e68534f204eec1b80461144e523bbf5fbd82dc9 45540 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_arm64.deb 9a6d7696d854e1249d18a60785fd94a9e1d91010f212db2d7c0ac5f20f8810c9 93120 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_arm64.deb 71ba800aa91d8de814f654d93e0b0a6d3c4481455f50d925366c6cc12879c98a 108216 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_arm64.deb 6b42f47171e2f0221d6000acd98eaa9e4d1e42ea240134a468e7271654869389 101120 libnginx-mod-http-perl_1.26.3-3+deb13u10_arm64.deb 71fc24723732dee9a38b2cff84096a6b773bc3e044fc1b7991e6480c75fe4084 54312 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_arm64.deb 00ec6380ecf27feef1df1a4558302bcdff1772a41382f166e0a64d7fb2084c34 91876 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_arm64.deb 4e43100ebaeed18f44fcb679d463e5af9b61f246c29e1bf87ad517e05b9e0651 103512 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_arm64.deb cc7a545f941436198884266e120eab9fd280179bd33b9673ff48b6a400c4e6e3 121156 libnginx-mod-mail_1.26.3-3+deb13u10_arm64.deb 147e6dafd8ba2544c6167d2344e7d17b26813df51f8d951ee611fa6544bd24af 184740 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_arm64.deb 12e7d51d7aef9148860b71ef5ba5ae90f9f7b3fefbb97d085cdc15ac96a20607 24096 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_arm64.deb bc7a3010d09720df1450bf19ebd142dd8e9270ad5676bb33c1514a84d7d030ba 89032 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_arm64.deb bc1b04192bc46db5ff8802f48849a488adf9b125670e446ff7f592344ff8a7f9 150116 libnginx-mod-stream_1.26.3-3+deb13u10_arm64.deb 190ab1689d678c868188773763f1bac1cc1d65e7b41838ae8a4d1ef3195fef07 1313480 nginx-dbgsym_1.26.3-3+deb13u10_arm64.deb 158098b7cb351c7fee15b7783ff333e71e4e3930a57fea6b6e431e9fed890463 85200 nginx-extras_1.26.3-3+deb13u10_arm64.deb d3f979797cf526d9f257356cb15bdce21071b79886318541e9ed8536aaa635f0 14315 nginx_1.26.3-3+deb13u10_arm64-buildd.buildinfo 3c437f0c988bd93a5222d4ecd52e4de2c0af1a2fcba2453a619a73908dbcf04e 572680 nginx_1.26.3-3+deb13u10_arm64.deb Files: 81cfa945b225168e46f0d83e5975a700 38064 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_arm64.deb cd42f44c71d8c388280a7625baea98f2 89872 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u10_arm64.deb 20eaf3af58836d00501a9ca5c11c368f 45540 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_arm64.deb 1f4d1a4081871d87501302a09a47290c 93120 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u10_arm64.deb 6f7948ea7e86af00981d12bd70bb6266 108216 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_arm64.deb 205c895c075300b5afe2851373fb66ba 101120 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u10_arm64.deb 3cca5b78795a88df2b4d5420bdd9fc07 54312 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_arm64.deb 6d80c5da02f3263cf33d39918a94a9c7 91876 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_arm64.deb db92c9919bdfb04fe5d77d55c11efe0c 103512 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_arm64.deb b01d13d4d52fe38fb85d1b30bb0a5489 121156 httpd optional libnginx-mod-mail_1.26.3-3+deb13u10_arm64.deb e5eb02f4ad7da9a503fc112d28dbdbe8 184740 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_arm64.deb 78db9306fc7e06e6be994056da585864 24096 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_arm64.deb fb018df73095939bc8e8d169b4745ec3 89032 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u10_arm64.deb 5b521ef1936d639c5832158d773a14a9 150116 httpd optional libnginx-mod-stream_1.26.3-3+deb13u10_arm64.deb 7bab5f34a702617b346c81d3f5144d7e 1313480 debug optional nginx-dbgsym_1.26.3-3+deb13u10_arm64.deb 7e9dea14b01c0e7c821a79c477fb0aaa 85200 httpd optional nginx-extras_1.26.3-3+deb13u10_arm64.deb c6baee7f36573287b85cad06bcf6d547 14315 httpd optional nginx_1.26.3-3+deb13u10_arm64-buildd.buildinfo d294d4bb0f1db66930551c652002474c 572680 httpd optional nginx_1.26.3-3+deb13u10_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgSZRd/+N1Ed3hy+mPMAxAOQQpzsFAmrYmVQACgkQPMAxAOQQ pzuhdA//d6q8/eHNG8OtUgJBPZJEkpPZ40BKJY5QjsOV/9uulF+FB7o2yXVyVuQ6 q6U8eO49Tj6yq0tByPBAnQPrKCe+7nfPanHIcR4QCYmNQbpp++ah5Njjv/H/Vwzz DYkCZOlUunDvGTEd2KsTNBQGEW8BApJzTF8K+1qfLxpJ5ZFH7fNKKkpO8dGOlHix R6b3eLalfSfqKy8ARAANRrrN9SJMpmGYlChARg7AGjBnfhJuap8cfnBdd4zxMkV5 c/nyYD8YBcQtmJiq0KB7ElbusYZWAqEdM1YUlxWMvGzWDjUG+WEoy12fYUy7OVKz qMJf5D7TnjHzhyCkgrAl7V18GBEO3IjKjETaLcTXXEXrkpDZuRcw5Ii8052VU+nN blzoaATMMbiHWncG07bjUfOFoe6k0dfGeTlKSSLN69hwMNxPp5BWwr6ew2mLiHzJ wUqCME1zRdQ/nR1P6xkx1cJeWb+HTd95SqTbDOltcDeMk4CsBKM9MnkWTUd8KrRL mNBSlfPb6dSN0ZUyndIKOKvidjlKRhWojaxePvcNsWl3fMCSXsTqHThD3XcMborI zG8MErVi4VqrkUFvCBwfTtHgs/TkFO0zqa/5F1royrsmSHnzjp9SJljukXL/DdWF nXnnzBDeQBGPQ30+juWOSCKrIr0gqVd+cxVXwh+2ldVNyxyQvJQ= =vyaA -----END PGP SIGNATURE-----