-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 19:10:24 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: i386 Version: 1.22.1-9+deb12u5 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u5) bookworm; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: cf59183b3970c81126e4df723130a303a2f38759 35768 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_i386.deb 12a625f11fdaadf6f4dc08484ab1cf8cd04373ba 85396 libnginx-mod-http-geoip_1.22.1-9+deb12u5_i386.deb e834df770316c9e5ae05f73393e2105ed144c5cf 42956 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_i386.deb b1c7ed4afe389389287aa2a0dd8a5490b0866749 88988 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_i386.deb cfa55b6f46cd0fe0eb1abadea4a15f9789d6142c 94684 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_i386.deb f42983b6b065f5e45e34946f9f9058c85d0e6e18 98376 libnginx-mod-http-perl_1.22.1-9+deb12u5_i386.deb 64a0e34e16a5b748e3046d1e8daefa29285b8970 51768 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_i386.deb 55536e9371903e08144fb05757c7f5bc25495ab9 87608 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_i386.deb e96b06f05fba75625337a5a7d9b58b0d62da78dd 102300 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_i386.deb ff2720cdd1a8b5e02d1625885bf9c6659cdfcbc2 121936 libnginx-mod-mail_1.22.1-9+deb12u5_i386.deb 37e1d701f5e5d2afc8970e85d8c4fce05f603fdd 159980 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_i386.deb 18feabc20452aca6ff1f2356e3879aed9847d405 21844 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_i386.deb ee5b8b08c7e07571a8b48addc909a2e33418c079 84500 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_i386.deb 4b9e597f4286e9e9e61d85d4b87a4dff32ce8510 150240 libnginx-mod-stream_1.22.1-9+deb12u5_i386.deb 88f6cc01f9f7ef0c3e21db89f06c18c1231cf446 1018832 nginx-dbgsym_1.22.1-9+deb12u5_i386.deb 688dc10a20204846d6bd8c5090e344bbe5ca672f 80484 nginx-extras_1.22.1-9+deb12u5_i386.deb 1cae23222a0af10ac14de5d62b6aa628cce8854b 14102 nginx_1.22.1-9+deb12u5_i386-buildd.buildinfo 0acec99122ed172a6d70bfb1f9f941daa1594d7a 570940 nginx_1.22.1-9+deb12u5_i386.deb Checksums-Sha256: 6b7e20481da26eb2b19c273a84dc221dc43b93242732ee7e6af1f26290bf9f8c 35768 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_i386.deb 4399f72e1bbacb372445708d1bad768d2f9bfc0df0735bd39d3c067182ad4124 85396 libnginx-mod-http-geoip_1.22.1-9+deb12u5_i386.deb ea8ff275cb5565fb25d5e0277987c0e14cd52553747e5d1ea8cf816197d8e202 42956 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_i386.deb 0cbf70776cb94873d368cd776a83daed9149121a1021979ed0961e5004e5d7f2 88988 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_i386.deb 8b3a1a6fcea511342fb428d07c5cb4c4570078019ec85d7a14d995d92b5237a5 94684 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_i386.deb 6ccbea550a8d731be07e18c32e64b4d2d0b28402c96001134b5abcbf198f5c93 98376 libnginx-mod-http-perl_1.22.1-9+deb12u5_i386.deb 3e152e8e4fcac3f95d4dcc7c51e3f410191770c35362524d3f29c911c8592cef 51768 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_i386.deb db7ce71252afca226ddb5d42918d27d59ff97c637ac26f8311e65963ac4efd6e 87608 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_i386.deb a61ad220383df1ac4eea385bddf9bc6df174c63375b0a091c7e96b687910b1e4 102300 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_i386.deb ca0a8cef7280de13f627b50fe8d49a3bf42a5aeaacb5df957ce2c8dc53a667df 121936 libnginx-mod-mail_1.22.1-9+deb12u5_i386.deb e4c9caa33edb1093fcd6c667fc0c9ff2845f0cfc08c318542a23820aeaa6dc2b 159980 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_i386.deb d8dc0e366838db0495ce97dee2cf25df0666ba472683831232d13397eca9b747 21844 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_i386.deb 904c0e326029dd0adec89bbe4a03a2d3cea088cac283dab2c5e9edf9c568d1c6 84500 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_i386.deb e7a8600fb7b96eb6fcacd379933e6262d1a6126bc350eabd151e1c74dfd1a568 150240 libnginx-mod-stream_1.22.1-9+deb12u5_i386.deb 7a7b4268a3afa00b4f5e1d2fff2815d391c0642f33f7816b9b118d8d72fa7ccb 1018832 nginx-dbgsym_1.22.1-9+deb12u5_i386.deb 86f1016f0967c5a2229bbcc3c22f415987f015a57a61dee6c0c3b48589153e7d 80484 nginx-extras_1.22.1-9+deb12u5_i386.deb f0a5800c48282985a43aef235aab3d1251ed18af728820bce5562d724ccbdec5 14102 nginx_1.22.1-9+deb12u5_i386-buildd.buildinfo c44254d4971df9d0958dc1595ffe3a347b39e2892ce070affb9173876092b9d0 570940 nginx_1.22.1-9+deb12u5_i386.deb Files: 8983882ce6d3f9f79f83566ed10459ea 35768 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_i386.deb aed8520f78dc74d288477ccfd09fe8e8 85396 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u5_i386.deb 2ab4b69f35a847ac3aa2ee7095db0275 42956 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_i386.deb d850b55d85ea64d7d79a7c7d9611c847 88988 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u5_i386.deb e3b8fdcaa1e411239ff917c5083212ad 94684 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_i386.deb 8a2199bdfa71f25d8c5581ec468b4cc3 98376 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u5_i386.deb f285f6cfd1ec3daf56d30c4744fd85a8 51768 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_i386.deb c8936303cba96d2cff0cb44cb48764de 87608 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_i386.deb 2e42f239b6018853f050a988b0de238b 102300 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_i386.deb ee1d8e7935400ee99029afb84cdf2811 121936 httpd optional libnginx-mod-mail_1.22.1-9+deb12u5_i386.deb 482d1e36c16c0cf642e4af990be456be 159980 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_i386.deb a81ffcfe74dc826ec395fd7295708056 21844 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_i386.deb 9c232e6b00cb5dd6c9a73ef26335e539 84500 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u5_i386.deb 5346aae4bb8f40464341ba2815aba3ec 150240 httpd optional libnginx-mod-stream_1.22.1-9+deb12u5_i386.deb b38d306dbef3927eb88548a0858aa9d7 1018832 debug optional nginx-dbgsym_1.22.1-9+deb12u5_i386.deb 5d7c9aa740ff67c85c459a90e2798dd6 80484 httpd optional nginx-extras_1.22.1-9+deb12u5_i386.deb ac91600332b431af1061618485a002b5 14102 httpd optional nginx_1.22.1-9+deb12u5_i386-buildd.buildinfo 27cde2a7de21f2552fffcbc1b66bc015 570940 httpd optional nginx_1.22.1-9+deb12u5_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmn2c7IACgkQPkCWRKsh 20ckGA//QF8l/QGKvLgfS+PAKpSbAWEStIl+ETEwTjsgv9Ml/wU5QUJvEh7nO3zO mofV6vgx5QGt8NGR1nk5peEv2WNaci5Y3ioJhWZRNIPTsVppFTyj0MjeskGGI4wD iJ4U0S305OiK9MTiU+cN1VKtEUq65UpUypCCCy+IYR1h+g8Cfb6+odu6hYc1Tb/4 goBcEDFBKGRZ/V8ngQGzc2SW/LWLxkHnc4pwLbaDDL3p9wf2TZZZ5mZRJaZaVHCf fR1WYlavj7VmYCeKl1wAutLjADg2KyT6iAvYrCnJ6n03NB44TyEs9nGJOIhAJ90J AR3BhM3qMQPMB4FYWGK8Xk3jND/zdNcDLT6HlVK7Fjr2ikXshcXc0+CpSX1StATx EByfwSRDoOSAm/LiI7DwT4qz/CXR722ogPxROC1nSznJoxfwOK4zaVIjdKzJlMnV KCaRnhiyPrNEsUjcBV0/tb3EbdPheXP8dx0yCAB3MH9505aooxU6RrmU9wh8C4jN EVxUMkGNolDfE465k3DDjT0fcw38xZfj7SXlpd3RKBUQ8dVQQJ3UHA3hTe6BZkFx ytcHRQcsRFRaTWDpCVorNqVuWtof8Dlx4WXbvOcLh9jAmczBVsB3HQJuoxy2RW0A /5bS2Tn0o8IV15mN3WZuw22PIf2t8y8zSNlWpBKt9+gY9eZPTto= =TuQl -----END PGP SIGNATURE-----