-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 01:08:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: armhf Version: 1.26.3-3+deb13u10 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-05) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u10) trixie-security; urgency=high . * Backport security fixes from upstream 1.30.6: - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias after a rewrite changed the URI. - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating string expressions in HTTP and stream modules, adapting the fix to the existing ABI-preserving script backport. - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate from request body data, preserving nginx-dev ABI compatibility. - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys during key rotation. - d/p/CVE-2026-97205.patch: limit pending asynchronous operations to prevent the request blocked counter from overflowing. Checksums-Sha1: 21f0af83e6e37a5dee77127964143670fe03deff 38396 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_armhf.deb e5a2463e55d978c0b75b9aa51aa09cedfad4858b 89140 libnginx-mod-http-geoip_1.26.3-3+deb13u10_armhf.deb c9a0bbc170822dea19e2608fea4afe20ead5e2f8 45832 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_armhf.deb 247a94a62e1dea46e98cef91875e3785b2bf0dc4 92432 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_armhf.deb 062be3d3b39403aa7be15cd3e4c6e7331cd0c9a7 108376 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_armhf.deb 249e3dfdf75a6ec48468c770998447f3ea8fe2c7 99608 libnginx-mod-http-perl_1.26.3-3+deb13u10_armhf.deb 5238472b8bb36b91ca87eea15786e359d4023695 54496 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_armhf.deb 6c8b43117f54d7318326fb77b1ad3ae6161f2166 91072 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_armhf.deb 8fb6905cf2e52b1f6bf9ba39b0b8113b42ca1487 110744 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_armhf.deb 0a35232d321cb01fbd5ae6aec5b7c8423c376124 119288 libnginx-mod-mail_1.26.3-3+deb13u10_armhf.deb a246975f4630f34b19013c97d88fb35aa22d685a 193216 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_armhf.deb ebf5c80783558595a4b1866f3a000e5725824b6b 24596 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_armhf.deb c1cbab0912947d04ece0a24ff3af789500e29aaf 88452 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_armhf.deb 04137c5439b7a5b9d0ce8f5c202942a3e210cc9c 144444 libnginx-mod-stream_1.26.3-3+deb13u10_armhf.deb d59a0e613063f83f2abf75a7d4c7447cfbc98ea2 1350308 nginx-dbgsym_1.26.3-3+deb13u10_armhf.deb 25a741c95f934e9fba744b3bab13af1997371eff 85200 nginx-extras_1.26.3-3+deb13u10_armhf.deb 92ab8b1174c81fd3248c96107a76ed49af0463f2 14194 nginx_1.26.3-3+deb13u10_armhf-buildd.buildinfo e40b7b53540b6762b9536b424f44d8ea97eac4f5 552580 nginx_1.26.3-3+deb13u10_armhf.deb Checksums-Sha256: 09ea882b88f092b5e088521fa37f74b556eb40866d4592204634f1c6111ec601 38396 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_armhf.deb 1e8ded427970f324a82eee359489e7e9c751b8aa48e4d17cf265dac83460530f 89140 libnginx-mod-http-geoip_1.26.3-3+deb13u10_armhf.deb ea3bb909157bcc95a5ab623cdebef63edc81dbaf0d9d8fbc8184bc2c0480f680 45832 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_armhf.deb 91ab8c46c3dbe25c410f2f0725c625e8a8a65aec3a165f14354b5a30ea1c1b04 92432 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_armhf.deb 0c885aaa939c7aaf4cd38c6dbbe2b63c011d7663733e55b787659dfa0df41502 108376 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_armhf.deb b7c060ce8822c73643887466e6207ffaa7a0a9aefee01bfbe6d34a1f032dfd50 99608 libnginx-mod-http-perl_1.26.3-3+deb13u10_armhf.deb 757452a34880e361cbc022a9ac9e0e0af35560f3a1941870f550f42fbd17543b 54496 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_armhf.deb 933fe280193e6b6700de7081eca8d56ddf39d7612e4c4f517d520f02fd1c8f9c 91072 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_armhf.deb 203f1295be224d15b4c52d96bf61831d8bd96c370382da2adacf1712cc1b1d41 110744 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_armhf.deb a31942bd98ff078d94298e3dd211b78261afacac4445357faf2e0d8d9dd239e1 119288 libnginx-mod-mail_1.26.3-3+deb13u10_armhf.deb 21fa6d4339ceefbc9d8104d8a42e391e7eee4206160f22db95c1aa1cbfc545f9 193216 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_armhf.deb 879576951c9dcb17d920ea9278be22a3076eea932e18bdbb8d460ff12da2e575 24596 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_armhf.deb 33c4539626572096a18cd22eeecd8092bf6ec7902bfb272456c97651b6a7fea5 88452 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_armhf.deb f8c9a1b643189cf176ba441c913d07dc3d5700b5c3e723fed608d633d0749c4c 144444 libnginx-mod-stream_1.26.3-3+deb13u10_armhf.deb 647042daf416c76d29c8adfe05055650f01367c47f959e3fd06f90e7caea90fd 1350308 nginx-dbgsym_1.26.3-3+deb13u10_armhf.deb 8d915c6a7d139a2de5f43c998a8ed3ae318e1c9218e7879579738e58079cb740 85200 nginx-extras_1.26.3-3+deb13u10_armhf.deb fbf0452a5d7dfc166ada2e100e9413555eed1b9b8ad952e27884946dd4e34ff0 14194 nginx_1.26.3-3+deb13u10_armhf-buildd.buildinfo f2e30c4588a740cb24a930401171ca60c53b191d8f781d90864d7d8899022d79 552580 nginx_1.26.3-3+deb13u10_armhf.deb Files: 7b91f41c071ff1ef023afe0e5ab080e7 38396 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_armhf.deb 95ab25df626de772502b6d8e110d419d 89140 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u10_armhf.deb ad4f4edbd817b9cb27fc0caefd684e45 45832 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_armhf.deb 8b7445591aac8211b3376ed11594a2c8 92432 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u10_armhf.deb c31a3aae69db4a274bad56c82364d4d5 108376 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_armhf.deb d36256ebe375fb123be5a90946909c73 99608 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u10_armhf.deb d3e90ddfd068fc7c4dd3b9d053e467a9 54496 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_armhf.deb 98301208b0fbb96400ffd0a4cd93dbfe 91072 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_armhf.deb 31173138b894d133bcb136f918059485 110744 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_armhf.deb 51239431eb63bc27f8efec59ac84d1b9 119288 httpd optional libnginx-mod-mail_1.26.3-3+deb13u10_armhf.deb 8840af0e4cc76a426ec4b55c87571918 193216 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_armhf.deb 21bb260508801e08c39f9180719702e7 24596 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_armhf.deb 1daffc835fba32a20567c196499b9c85 88452 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u10_armhf.deb 34999cc152d52a60adb89929d1fcc2d8 144444 httpd optional libnginx-mod-stream_1.26.3-3+deb13u10_armhf.deb e59eed1641bf9f94ce788536a87689f5 1350308 debug optional nginx-dbgsym_1.26.3-3+deb13u10_armhf.deb 8b8a834e4f9e574a006ebca2abcab23a 85200 httpd optional nginx-extras_1.26.3-3+deb13u10_armhf.deb 63f97725d2c55a01d91dfddc5c98604a 14194 httpd optional nginx_1.26.3-3+deb13u10_armhf-buildd.buildinfo 58dd15625a182ffa7dd1c86a637d630b 552580 httpd optional nginx_1.26.3-3+deb13u10_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmrYmZcACgkQnwznazfj XTra3A//SKtEZN70XETE7EA75IyGiXcXcfYLI3EwbE4Z4Z1uMvX3kgeak0J13D5Z d2zuJikxddTI0NEp1/45cIlKCBbzRCAK5LvdF2GRiuGGG919/FYtooGAk53Kh8yj wo5/mi4rFlG6ETEQhha9xfoo6P96f9jbjnrnjZOqG9v9BSfZ1Xb4GAFQUjCPOHW8 0qaIO/k/P6whF7jYVKBPwAcnlMKAYJym/RdMux1bIEfrt5Hfg8K5aj6ZXvMJl10q Pc5iWw7IskTf4p3z1EplmF2TAUHCzhhn7aJ5ZEJw9uAffwcWOZVYkkWKZFC7PfkI CZ/KGNf4Y+zixdiOwRn4yY0k4qcNWvffCnG2znAG3Z48K8dFAqoUHFq8OgJK2Uue cRSsDtosdO8KLcbSuLJnkn5S5Y+tYnbxXqOCLi4r50pUKkDGdsvjPGvlqgyvj2yr WLossrZxKYatxikOwG2DGiTTWf9NRay2wxXS71t/JveqmAPN2hMPi1tS01hVTQrY mhdtIIGkx3j4kOqRQTJuJLnE99XqY/R62QG8MFavbH9dA4D6KQHL+3GM7hzWx/O/ Du7L67oL+BPBfw2s/9TMVXw63R3gTQ7quG4bHBhzfECIV0xKZ5HTj3eprqH8tH2W UpbBQW1SnGz1CtfLZy2R5TYDfW0JdO++lLRfKrdNfLGyXUm4NCs= =YzKp -----END PGP SIGNATURE-----