-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 01:08:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armel Version: 1.26.3-3+deb13u10 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-ubc-03) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u10) trixie-security; urgency=high . * Backport security fixes from upstream 1.30.6: - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias after a rewrite changed the URI. - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating string expressions in HTTP and stream modules, adapting the fix to the existing ABI-preserving script backport. - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate from request body data, preserving nginx-dev ABI compatibility. - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys during key rotation. - d/p/CVE-2026-97205.patch: limit pending asynchronous operations to prevent the request blocked counter from overflowing. Checksums-Sha1: 6cf16cb9ddb909e3b3e0a31cdf019598ce85c88b 38384 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_armel.deb 1fbe41d5827ad513d5b56fbb18e50ea5ce1fbcb4 89860 libnginx-mod-http-geoip_1.26.3-3+deb13u10_armel.deb c03d8546012e7f1c647e9feb3c6d56f29672e078 46224 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_armel.deb 820db78fcd20ee20b7916c96aaffb7a34f4d54e7 93892 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_armel.deb 563a5272de2a8ff5d9b20bc8c443fe1a69f45f21 108360 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_armel.deb fd1e086ca032cf5d5fae989fad611a6f7b67f3cb 99672 libnginx-mod-http-perl_1.26.3-3+deb13u10_armel.deb 4a690cbb51ec6b7189eaa451ce26cc1d2696545f 54436 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_armel.deb c9f8534a1cea82f5a19a19a8234363e5e0ab81c5 91084 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_armel.deb 4c8c499a0af4381101d484339762ac0b340e490b 109812 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_armel.deb 9d66b207f84d2d0147740d4ea32df2c1d6d0fd0d 118872 libnginx-mod-mail_1.26.3-3+deb13u10_armel.deb af4958d738f3f628fc71da7aef34f03e7dfbf448 191216 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_armel.deb 5985bac6b922eaf7a26fb8248548c7f5a516bb67 24552 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_armel.deb 0f02ad6daa2dec69129036e8e777a614eeec1d01 89156 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_armel.deb f5b502ff66efb37edb832d00bd807216a7c04a50 143992 libnginx-mod-stream_1.26.3-3+deb13u10_armel.deb 1cb75c09b99d2ef45cc6841906edf33ddfcc8203 1327344 nginx-dbgsym_1.26.3-3+deb13u10_armel.deb db25d63b6c7083ddff3adf3b0b03b9141069f041 85200 nginx-extras_1.26.3-3+deb13u10_armel.deb 41414e5e5a2903185b959ffbd300526dd4fd8496 14180 nginx_1.26.3-3+deb13u10_armel-buildd.buildinfo 1b1a85b2629d0cbf77df08d8f4d34bf991eb9fc8 540504 nginx_1.26.3-3+deb13u10_armel.deb Checksums-Sha256: c052773ce5922893d1ff0a3d62cc15cbdedd0a7f21fc3f25056097d3c0d3473f 38384 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_armel.deb 7ce909e17e29c02cc9b42cd7c0a9777d478b16ebe7b41d6869728c96371b434b 89860 libnginx-mod-http-geoip_1.26.3-3+deb13u10_armel.deb 0da62547b6d4e98b609154948dfd24904b584f881fc889b57ab443ab62e1d244 46224 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_armel.deb 376cfbba5fc5968887748f90ff8ecb84a8864da6ea19c07e202e7193e6b94731 93892 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_armel.deb 3bc9a48ff67c4ca0016ef6c8f270403203567a6e81a8ea5533f6339997ef5c9a 108360 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_armel.deb 31d4e5f8a27b9f425ff26297dbeac8c339448842ee5ae08a6238102309f2a896 99672 libnginx-mod-http-perl_1.26.3-3+deb13u10_armel.deb b96fedfcaf8cd78779b64861625e5da954c453ae1cbfb55a5f6de3e1787c4cb3 54436 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_armel.deb 9ad9fabb88f35eedb028f59e5860ee0aeb68d4f3ca7021a9bca6c829f683d6f8 91084 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_armel.deb 9d0aa93e0e9bf5e4881fc72c76e0c840795642ae74dddfa645e590d53cff82af 109812 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_armel.deb 48f725319636f5818a34956303f29358ebc48def3d6d452e30b411df74a2194d 118872 libnginx-mod-mail_1.26.3-3+deb13u10_armel.deb e692ca6bc1d70c7092c161077b0427bba1892b220f1227d73db2e871b5b3c9ac 191216 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_armel.deb 06fdac903fa01bf89a0a3aeded33db48ea1feee8b16ada5a19ef88a988bf47af 24552 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_armel.deb bd2bb402f118475e4d63f5600b8166d792e1428b6df3cfc89cb3fd366208ebcf 89156 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_armel.deb a6b969737b11d4e8a014f5feb330bef1df94c4f463da451c0d029af1b7bf3847 143992 libnginx-mod-stream_1.26.3-3+deb13u10_armel.deb 7c77cbb4c38783e33a23352aeb75cbf45c4c9ffa1e22f53de0dd59e696f08595 1327344 nginx-dbgsym_1.26.3-3+deb13u10_armel.deb 0fd3cfd29e1b1b38dd7777c60f88b2b46199c15f96a8ae06566ca5380b3c50b4 85200 nginx-extras_1.26.3-3+deb13u10_armel.deb da98095631b52c11b207f9db3dc0922062e7c2142c139be146395979b25c473b 14180 nginx_1.26.3-3+deb13u10_armel-buildd.buildinfo 2aa0e2d49deaf3748b5538d0fa35e1bbd3319bbacb39a8a4a7d1c4c9b6f05d27 540504 nginx_1.26.3-3+deb13u10_armel.deb Files: a3dc659faeb7aa66fa3dc259b71f3b9d 38384 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_armel.deb 09363ab803d8b27ab5f76017392d699d 89860 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u10_armel.deb a5391bfedab3435f017db961c20f0334 46224 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_armel.deb 4b432ff79a5728a33c9e789c53eb2309 93892 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u10_armel.deb 0922caa85ac8fdc47400d06688fd893e 108360 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_armel.deb be89443dfba8b5ac5307d48687466b75 99672 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u10_armel.deb 28e8c4f27ad7d77848830616268a02b1 54436 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_armel.deb 9e8c65d6fa0bc3d7636905b43f380253 91084 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_armel.deb 672f359fdf4baf37304346dd447ef7d8 109812 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_armel.deb 1f909bd7f177a9116cf074bdb7f23c9c 118872 httpd optional libnginx-mod-mail_1.26.3-3+deb13u10_armel.deb acd06d62680b30b5e23119b4e0c1f702 191216 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_armel.deb 1acb507d4d510e1d0f23ab9d8e2dd168 24552 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_armel.deb 4dffb0159ee3c7142730292cb74d2b09 89156 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u10_armel.deb 89454d5acf4f212308aeaf8e77cde497 143992 httpd optional libnginx-mod-stream_1.26.3-3+deb13u10_armel.deb f2ea77aa9043cf31565628565fdcab54 1327344 debug optional nginx-dbgsym_1.26.3-3+deb13u10_armel.deb 83cf8addf5c754b8e0d1fd63da9fe839 85200 httpd optional nginx-extras_1.26.3-3+deb13u10_armel.deb 53fee2649ca3449e98ad927c626b61ec 14180 httpd optional nginx_1.26.3-3+deb13u10_armel-buildd.buildinfo 4e5598ff1273811aac543a117332c19c 540504 httpd optional nginx_1.26.3-3+deb13u10_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmrYmX0ACgkQvzDqKQSG l8VTsg/9FJM9nTZz9wrfQF5j6ChHYX/f/n4ej0tAebdrLunNtP9MRZodUaQII26/ qqRDANrzvb5GQXp4N2ugBQ0PaBP7rzVAZGCkWwl5Cv89AOWbl1H1TZPvzFCQQ6l+ aY/R6YFhelX3BCROqRr5UzO4ToFEZAteso5LxA75RA4Pz+owLkHvv7rXvIcybLSy n+H/SRtKm3XkeNlsnUkooqP37MpRANkvBnSfITOHl5g9Sl9FvP25/SEXAz8RlFZ8 cpRAW2VDxFKSbb/YLMT6bdxSdu/5qFninhptJlYzt93rr4DsKNGW7/1pCNa8U21M /vnCb+igRgxo0AQABM4Zj/Q7H9+hPrxZMaOssroB/4hVc2SzCsFBm6FFAAhyfblG rUExC2lTW94sGzw0dQkD9xxKC3+AKnX7rxsbjscnwJrrwynbD6JfRZrjP1QqEsq/ zYY/QzKSxoRlOrGZ24+YoNsb/aPpnskxZXL1NswSRPUXIVZZH8keoW0QQqfR++EP cVpyGYmrvTfBkn5WdJV3Ojp/pmwtDfJ86HAF5zRXf/Rm0J7gSzd9QsfG0UaAi5PL Y4WNEDXRdJJxkIz+3kuHEMBrLNAwdPc96IYRd4a2FcEvfavYZJZkYiThN8jFCyGo GEdIz4nbuK7CMcWyW+NO+L5Ft2eg7wAgoNq+OuXyKrA0Dg1lcwU= =sIEL -----END PGP SIGNATURE-----