-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 01:08:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: riscv64 Version: 1.26.3-3+deb13u10 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u10) trixie-security; urgency=high . * Backport security fixes from upstream 1.30.6: - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias after a rewrite changed the URI. - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating string expressions in HTTP and stream modules, adapting the fix to the existing ABI-preserving script backport. - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate from request body data, preserving nginx-dev ABI compatibility. - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys during key rotation. - d/p/CVE-2026-97205.patch: limit pending asynchronous operations to prevent the request blocked counter from overflowing. Checksums-Sha1: c79c8a7c695f0574ce00bbb3d6df7403ef50089f 38008 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_riscv64.deb 00a57ee2cd3f1bc1ae9990be885032d6ac871acb 89924 libnginx-mod-http-geoip_1.26.3-3+deb13u10_riscv64.deb c037b1b5027293f33382e94923fffcc858f60006 45044 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_riscv64.deb 472ba8328f3268c7d0d6a6c44660e4fb4c2d9c09 93496 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_riscv64.deb cdba8ad971cd5e3064006f657906ea83161c5f40 106888 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_riscv64.deb eaaad6eb3c44c846f8604507059099303eb6d399 101904 libnginx-mod-http-perl_1.26.3-3+deb13u10_riscv64.deb 2b777f3bd54d4c62ae3d00d2e8eb5d782db7ff75 53984 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_riscv64.deb 6b564cd635c5734db2115f13c496b7f1b1ebd91a 91924 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_riscv64.deb 700f4e65c8d46d83a8efbaff5171456d73cd701e 103788 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_riscv64.deb 3fc2671575c1372812e50e6b0ed81f358a716616 125220 libnginx-mod-mail_1.26.3-3+deb13u10_riscv64.deb 21f4227c771dcacdf5e76d6b0ae3def42db09ec9 185904 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_riscv64.deb 89cf11095e9f164878a3bf3d0ac65e845ac4fdc9 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_riscv64.deb ea1693897e57bc016ee317687a4cbf0e4307780d 89228 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_riscv64.deb f924b1a67eb70b8d7d9e90863470e0bc76c6fbc9 157200 libnginx-mod-stream_1.26.3-3+deb13u10_riscv64.deb 52d85684cfa9a2ec20fb9c84354e781adbdd112a 1321844 nginx-dbgsym_1.26.3-3+deb13u10_riscv64.deb 7dea7854208fa9550f1391d11d75ad10aa73b2e7 85196 nginx-extras_1.26.3-3+deb13u10_riscv64.deb 98ce178de6a4c7be076e8de3729f97b1383ac9a9 14365 nginx_1.26.3-3+deb13u10_riscv64-buildd.buildinfo 8578827d849c5d02468ee1da9da4193ab1bac31b 633864 nginx_1.26.3-3+deb13u10_riscv64.deb Checksums-Sha256: b75374a63af17a52a511955f81c3a8ee3cfc4cf27581c4447a7b79c941bfd8d9 38008 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_riscv64.deb 3e0c81a05e8c7b7318b98a9de522d6109b435de02f2a1c0a57b6e2f9cf9b8868 89924 libnginx-mod-http-geoip_1.26.3-3+deb13u10_riscv64.deb dda3ca47dcb200bd9d5dccc7e1194a3096a34f3c4538071b18573c0e8e4e7b69 45044 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_riscv64.deb 7a34cbcc286104149d7620f0a5917a141d15224be7ba162fa9e7157a139d6023 93496 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_riscv64.deb b8b2b208e4be022b1c01438eff44246de556d37db0ff126f4ab17c026271599b 106888 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_riscv64.deb d68f497a22fbcf6ed01107528dda165c43411b4c748874ff1248afabc552c245 101904 libnginx-mod-http-perl_1.26.3-3+deb13u10_riscv64.deb 203aa07cc421e903a72b7af647a76290c7c9c0114e9f6caba55b8805d0f742c5 53984 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_riscv64.deb 77d35db0d323be8f8bcd6fe51814f5a25d098a317f3ebcb8336b4afdffaca2b9 91924 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_riscv64.deb 3fa9bcc5f7bd7af071113c06ba33d0a4aaa4c409dab45726cdab9e455efed681 103788 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_riscv64.deb bf9960ead7ac1dd9d3ad828956545af81882d2ec7b2803a4d0002cc6da2f385f 125220 libnginx-mod-mail_1.26.3-3+deb13u10_riscv64.deb 812583545ae72802a7db5faaeb7f7d36f27c04c74db0d31d03a2974738585e2c 185904 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_riscv64.deb 42d1adfbf857f3329ba081a7659915c10ebff0a97859a1810a606865330458e3 24024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_riscv64.deb 0920e4dcb441ff262db26af166b617c834713ab52f156a593166bcad90fd1176 89228 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_riscv64.deb 302813b060249f24bc6e5a69314f177a2a0f2e7dec1fb60fa6a81d65cf4f707d 157200 libnginx-mod-stream_1.26.3-3+deb13u10_riscv64.deb 226188cb193ffe321eafd49aab362689e2c4099cf469f672cd978cf5333ef045 1321844 nginx-dbgsym_1.26.3-3+deb13u10_riscv64.deb 6295652edb2e818e81e906076bcd0854d7426446c7a7315e7faebe13c9fcc10e 85196 nginx-extras_1.26.3-3+deb13u10_riscv64.deb 5972beefe596cdb4239a6880144a94047ff85f55f121f9508ff9effe8e468106 14365 nginx_1.26.3-3+deb13u10_riscv64-buildd.buildinfo fff86515f19731267740f633519605f35c9ff6614cc4781a17b9645d4e6d17a9 633864 nginx_1.26.3-3+deb13u10_riscv64.deb Files: 00b4eb02af40f8217b1034e35bb8655f 38008 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_riscv64.deb 43e3ff15249fb4b5a8ed5d02ad8984d2 89924 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u10_riscv64.deb f72217221185d0392c0cae3d64e9ecad 45044 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_riscv64.deb 660bda5d756b951a1c72d71ca1d567be 93496 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u10_riscv64.deb 5559cc8d693657cbf344ec9fcd77087f 106888 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_riscv64.deb c242dea76ef5202e1be77dbe87100350 101904 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u10_riscv64.deb 2b0a1be1732dd33e86f86d0dd09c11fa 53984 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_riscv64.deb e53ad4915593dcaa5ceba38ce17ea699 91924 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_riscv64.deb 2ca516313e7b3693db0bb7d7053e19ae 103788 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_riscv64.deb 683fa2daee2ddbd05295da8e63816543 125220 httpd optional libnginx-mod-mail_1.26.3-3+deb13u10_riscv64.deb 1253243003a95457181b0d7a3d4120bb 185904 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_riscv64.deb e69eb99dda8681873496eeac2c88a381 24024 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_riscv64.deb 7f44d7d6fb5e20b5450c142e3435e811 89228 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u10_riscv64.deb c9560c72cdbfaa6f30e59316c6b14155 157200 httpd optional libnginx-mod-stream_1.26.3-3+deb13u10_riscv64.deb 4bfd5660dd695ffbee968440f2721440 1321844 debug optional nginx-dbgsym_1.26.3-3+deb13u10_riscv64.deb ae62e5ff68d13730127c407001fbe411 85196 httpd optional nginx-extras_1.26.3-3+deb13u10_riscv64.deb a9b27f1e055590f231b51a322e5f2f59 14365 httpd optional nginx_1.26.3-3+deb13u10_riscv64-buildd.buildinfo 957ede013f3e2648ed287c0b2b1c9da7 633864 httpd optional nginx_1.26.3-3+deb13u10_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmrYnkUACgkQIhSPlPtg qxko+w/+K/prAYApkhh9NoYV/HPucnPD9jSQmgOm62dcHeVhQIvKonX7Wrh8Lt8s /TKO2rssLdU9n8g1oUYG6pDzWWNVlWe4Z272utkEWrpxLslJWXC8r3kxQ2asiAv6 mxsykGubOEhnDVWRHujZ/Dck9tfQa1vwizJKKEcglG6rfQCMldsk91HecHxczkVo 1+uftwNimMelLcGjMSKfU+jtdmzYQSfiXqxmepWxEwl9BaKsggzixpeESt30XzCu BXeMqIahTAS1pHIIEMk3Etbfb1SvqJzlEHIi+FQpcid/TrFrdrOBMCnGEdQS3/ne vcJLAhnIXuJZ3mQRPkELnw8eKHJmtgZKoDbo0ZtNm2QAAFXtrbKQqEZaZWo6MFBt FWQnw1uKyi28RNawx3owQVpFIIhs0ZI5MGFu6fMiLFPEWzDWsVJR/WyvBjIktwqK SeOwbFR+WWvQWhhLvoY9JQQHKF22r8eEGSziS5DSi/DoMtd79b9+iYyd9qWqsbsN 6ghBwwt9E79UOvzw8GIY7MAuLcZzGqu5SRudoTmXpOYx+Fc182xO8NyK34Dhh42G 5dD9rgpNGqBsPpGDw1wAtnpbKkI6JRQCCcBm9j9uo2dh15MmQSSOKyw03waStRFB r4VjTSIdMZU4vCvkdqVBF5wUFN2vVMYJ9eRvgWq71bU1jVFLlLI= =aoax -----END PGP SIGNATURE-----