-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 01:08:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: s390x Version: 1.26.3-3+deb13u10 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u10) trixie-security; urgency=high . * Backport security fixes from upstream 1.30.6: - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias after a rewrite changed the URI. - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating string expressions in HTTP and stream modules, adapting the fix to the existing ABI-preserving script backport. - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate from request body data, preserving nginx-dev ABI compatibility. - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys during key rotation. - d/p/CVE-2026-97205.patch: limit pending asynchronous operations to prevent the request blocked counter from overflowing. Checksums-Sha1: 36ff9597729fc27563213a10f7eba093fa1e2a28 37444 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_s390x.deb ec787c96a51b8d09bdbc8c405f274cbaf2d720d9 89624 libnginx-mod-http-geoip_1.26.3-3+deb13u10_s390x.deb 5392069cebe03adb5406b12b8bff36eaabf929f1 45784 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_s390x.deb 580bb3830691ac6e4083e6e9bf2d0cfc11d15827 93280 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_s390x.deb 1182f98bcb9d06ee9d8c2a1437df0a85a005301b 109024 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_s390x.deb 6f9dc6427c4a14a43725bf44ca8d3a6e6bff906c 101236 libnginx-mod-http-perl_1.26.3-3+deb13u10_s390x.deb 10b29f476a0db88dfef7729a038767f8445de90f 54412 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_s390x.deb b332dfed53db2228be3dc1914ac27f2afdc9d647 91732 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_s390x.deb 9a437044781c8946b6429d56d2175a9b2c7149ba 106256 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_s390x.deb 993e9142d12c8b4b231841d5fb0998b49cba0be0 123748 libnginx-mod-mail_1.26.3-3+deb13u10_s390x.deb e94381e89f4d9b919d016dc40bde6301193d9847 189264 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_s390x.deb ca9f6ec6034e26f057eceb36102c271a28ae3444 23032 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_s390x.deb c8316d79edd91e5e5aa4e91649c4330628293cb3 88828 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_s390x.deb 98007a422c267eeda12b0e7392459144569baa04 152640 libnginx-mod-stream_1.26.3-3+deb13u10_s390x.deb 5f0adc85dbcc24093f3de48727c65f6c79900532 1357252 nginx-dbgsym_1.26.3-3+deb13u10_s390x.deb a28687fa2fa0ccb4e8a9324451c3b2c869ba065c 85200 nginx-extras_1.26.3-3+deb13u10_s390x.deb f3230acd9f315550b36efba8d47b496d1868277e 14075 nginx_1.26.3-3+deb13u10_s390x-buildd.buildinfo 224f78d2e15e33278bcf94e7e926f2c3d27c3dea 600692 nginx_1.26.3-3+deb13u10_s390x.deb Checksums-Sha256: 7e1796f1d10e022e334b33afc5481cbe9dd7ae72c0a4f7fd27eb1306b01c7a65 37444 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_s390x.deb f9bdf294d3e4085bc06061865c15e94ca34cc20411075b0820e232eb753fb36d 89624 libnginx-mod-http-geoip_1.26.3-3+deb13u10_s390x.deb eacc68b46b12f894993b01cf8c6cb39e5c3fbcb26cea700e6849f98fdf56f62c 45784 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_s390x.deb d351cb2b8b3cb0d35cad1f015e75d82a1d6a48a419f2d29f02f1df53c09e1d43 93280 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_s390x.deb c277b256ece387da9fd3e0599479188f0c16968498617e85f6661fedd3c3970e 109024 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_s390x.deb 37fc6277a6b2ca5cab164e24bf5f8cfbca5d72915dd3118dcc888149b652c0e4 101236 libnginx-mod-http-perl_1.26.3-3+deb13u10_s390x.deb dfa6bb99a9dcfec83f75a857836f70c02a8a346c775943e0567e55087500d378 54412 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_s390x.deb 76565e62ddb3f4ba42235dacb9b229d8cef914442f42827df40dbc7bb1a2c349 91732 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_s390x.deb bd9fd0b31c0bbc7f40f851cf138f36923ce85636c519d10ef4326b0586f5405e 106256 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_s390x.deb 08c1f0f0d77fbd5f6583d783620ba2cf54e7fffd7c6ac49fa62ee7ab57112c9c 123748 libnginx-mod-mail_1.26.3-3+deb13u10_s390x.deb fce0ba66ce2c61f6bcf75dbd8b17a97269c2030ca82849fb7241a5d32e3ffcfe 189264 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_s390x.deb 51d6551379ae56897e13cc8152494bf7b5cc5e027e5b262ea64015fedb1a3d71 23032 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_s390x.deb 0e731c98d12d035dc4b12114b69299519f90b5f43eda74122decbf8e1394b728 88828 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_s390x.deb 8ac1319291fe9e9bb55ca5ff5fd8348e33b0f6790291ef7612499bb4fae18776 152640 libnginx-mod-stream_1.26.3-3+deb13u10_s390x.deb e89ed272c9aabe1e111400f12cb50cc43275141ab76d56f078557a3ff1f75cce 1357252 nginx-dbgsym_1.26.3-3+deb13u10_s390x.deb 94dc21aeeb9d65698b49e02f12dcd68baa6f15a8a44abe383f132a6bfbfa5757 85200 nginx-extras_1.26.3-3+deb13u10_s390x.deb dcc939ccbf97ed43e0c6ba72fa08c074c24d18e215444a90bdb43cbf580470ea 14075 nginx_1.26.3-3+deb13u10_s390x-buildd.buildinfo 8f6f9bd2c2e1608d0cd6b1487813f2aceaec37dda063237c38dc6eddc91c2948 600692 nginx_1.26.3-3+deb13u10_s390x.deb Files: 9d9ddd9c9bd64e40b78b05bf2da54de7 37444 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_s390x.deb 1654a431f4b21310de71cfd016de8c51 89624 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u10_s390x.deb d73c859d375a5f493a4bb5b4f3350dd8 45784 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_s390x.deb 413052cdd65e7f0fc7daee17463695f3 93280 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u10_s390x.deb 1511f72c1e1e8f3ccaeec28ab3607403 109024 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_s390x.deb 1b277e1afef558c8a6bed98b1ec1b2a6 101236 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u10_s390x.deb bb5c7a24777a45ffe6b53722538d7a92 54412 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_s390x.deb c40a71b919d9455a37b2967f7763ab2e 91732 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_s390x.deb 18dbb97b238c83218c05812ecd6cc929 106256 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_s390x.deb 4bcc1f8f39dbe9511e4736dfbee85550 123748 httpd optional libnginx-mod-mail_1.26.3-3+deb13u10_s390x.deb c6ba85f74d5aab98c6e5f39a27b3e091 189264 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_s390x.deb 209eb398d80b4cb3975b6522ebc2cb47 23032 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_s390x.deb a2a3b8c6090ec7a954fc921fba737c04 88828 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u10_s390x.deb 3a491977220c3d0513e3f505d384fc9d 152640 httpd optional libnginx-mod-stream_1.26.3-3+deb13u10_s390x.deb 63f011af58db81ecac2e18256768def4 1357252 debug optional nginx-dbgsym_1.26.3-3+deb13u10_s390x.deb 2f0d59c9f8299f1c012d4bf87e15e560 85200 httpd optional nginx-extras_1.26.3-3+deb13u10_s390x.deb 01a9f3440cea01403361a160f449f7ad 14075 httpd optional nginx_1.26.3-3+deb13u10_s390x-buildd.buildinfo a2ef8a69469e2d55baddc2f773c2195d 600692 httpd optional nginx_1.26.3-3+deb13u10_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPFXUCSHwedwJxYxMojUpyTy8GroFAmrYmVMACgkQojUpyTy8 GrohLg/+OVNlavSPIPb/PNagC9nvF3bVElfYwfmF+SIIYlNNlGUy2CpzLMIrFtxc fdrZjEo7a7qkRfLZABJtXIxyx0gYSD1rXwlfky5RtKgBYkPB9xcAcPakT59+862i 60yHrlx0ef0qQWuqXF0qeTjKonwHOiJTJzBR7yp+VScZndlCA6uaemkbZOOR0qJX 0Ko30bYoKtEr4Pup/AvE0QFwBbkRdMzNtHKW23BmAyxnlUv8jYv8IlANJaxKk5rP hgvVjv381ezngvQEicj0DhuC3vGJGgda0POq2JN/ewueCrB4yFcn6tUEDhRLoN30 KSDORsFsnluFfDGyV3RgiQiz52h+Vjy4/S227GkYXmJeHsKe/cC2YXe91b7OZz/H kdsCiqUohP69Dda0YfWfPw1YcUETn4cpPu6qzP5/EQmnnY9RncYO4sxrf1uQUdNB y4885qPpvLzwEeZ1smqpmCUnpN0f9iKwwxCoh/2lhydUBpI2CeLZEjpe8XfDRz/5 XNv+weg1nmodjXQEGxpj6ZFSrJZ2FHnSgMBCz/zffVgLn0rTxGSPmHJvcBKxu+xt zbSMGBaCvlv9UI6zs3oqQBvJESW5oyJlWSxg4HNyo0TLWK+i5jgvxGQ/FMmzIbQm kf4BHi9vmaQBIukUkLZVvsTk66VnyDbvgBTd1QnJa9v8x+aFcvg= =OFUn -----END PGP SIGNATURE-----