-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 01:08:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: i386 Version: 1.26.3-3+deb13u10 Distribution: trixie-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u10) trixie-security; urgency=high . * Backport security fixes from upstream 1.30.6: - d/p/CVE-2026-15176.patch: reject URI to path mapping with alias after a rewrite changed the URI. - d/p/CVE-2026-93479.patch: protect reserved memory when evaluating string expressions in HTTP and stream modules, adapting the fix to the existing ABI-preserving script backport. - d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate from request body data, preserving nginx-dev ABI compatibility. - d/p/CVE-2026-97629.patch: initialize all worker session ticket keys during key rotation. - d/p/CVE-2026-97205.patch: limit pending asynchronous operations to prevent the request blocked counter from overflowing. Checksums-Sha1: 381bd76d4cd7b75802f9b0c1909cb35adbf866cd 37160 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_i386.deb 74f077e662b96e8f40531e584af2aa2c85af47ec 90208 libnginx-mod-http-geoip_1.26.3-3+deb13u10_i386.deb 13972bbb4231606f42508f027f243553bf585d4a 44860 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_i386.deb 197796a7bae6eb6b8aeed7d80f792a7d041d7c00 93932 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_i386.deb a7bdc4dd9ebd2fb533b7bc5ead4002da66ac5ae4 104380 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_i386.deb 75e7eb07ebeb6f216357f856d4edcf918d4cec1c 103196 libnginx-mod-http-perl_1.26.3-3+deb13u10_i386.deb dd74cc395468758736cf7eb40f8f8f9c2995e13d 53136 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_i386.deb d6383c528066129b689237e1c3ae772841454f35 92560 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_i386.deb 2136afa63c30cce38656904507abf5e6ca6b211c 103132 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_i386.deb 40f9dd44d8cd45ea26ce0a767a29cba62fb22799 126324 libnginx-mod-mail_1.26.3-3+deb13u10_i386.deb e0e6693464570ff696dcba5825ed3363f2955f16 175588 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_i386.deb 67a31056931081696f159aee87384b1a3cdd496a 23496 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_i386.deb 6b01e5b0e01d3290bf273742878fb1c96aef2109 89292 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_i386.deb 72c1a47ec2f19e79e0a86444fd45f5092cce2b3d 161220 libnginx-mod-stream_1.26.3-3+deb13u10_i386.deb c29cd4004bd8a83caa6c4ee3d640c9952c22ab68 1227328 nginx-dbgsym_1.26.3-3+deb13u10_i386.deb ee68648974f683fedf7443af54652435975645e2 85196 nginx-extras_1.26.3-3+deb13u10_i386.deb ff623666ff0ff98c01dbd3cb9cc60455b0c91c47 14187 nginx_1.26.3-3+deb13u10_i386-buildd.buildinfo 668e41e79ba8f0f71c21428ca5eba7f59ddb4f10 668720 nginx_1.26.3-3+deb13u10_i386.deb Checksums-Sha256: 32d7a1d82ce981e5c8d3f39ac9c79ee15050c8a715cff895f60c98d9a1da80af 37160 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_i386.deb 3f49d9c1ad74a5326589d481ab03de1ff12876e4e2f6f8aa4293302011bde463 90208 libnginx-mod-http-geoip_1.26.3-3+deb13u10_i386.deb bc54f8ceb1e934d15fc0aaaa3c619d0932a67f59e1fcbb3de7d50b1f349c3988 44860 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_i386.deb e268cdfb760b2691bb3cd7c9f2a79cbbe8db949f80fb78189deb969d5b1fa0a2 93932 libnginx-mod-http-image-filter_1.26.3-3+deb13u10_i386.deb 9934f529764ed1c54c68c7914f92a6aae824a029ac5b64502a2ec010225f16aa 104380 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_i386.deb d1e8e052350874241c06a16ac7ba79165bb0ccd8194e66787dcfb8ccb8c5956b 103196 libnginx-mod-http-perl_1.26.3-3+deb13u10_i386.deb 83434968326cb4c3c84138f50c87d267a20a96ab93e0a0c0170bd0c987e03adb 53136 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_i386.deb 34c47154250cd67bd883fb4a8ab760acf6d93c5fe3adbe78e1b3851bcf14927d 92560 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_i386.deb a4cd5633f4910bf498e1635d9cc86f69b9dd24b87ce8f2c4081a0b2cf48a4e88 103132 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_i386.deb f01566a40a05fd170d686905fe705c32b36d632468b2fc4b63a3c6586c0db93b 126324 libnginx-mod-mail_1.26.3-3+deb13u10_i386.deb 8bbcc4378b30bfed0a6dcabed3f9563b321c8577b226fca6e98cf853fca39674 175588 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_i386.deb f9b3f7931ed444b8d9440ee12956d8f310b4ddafe0344744ce1ae63b6fff80c9 23496 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_i386.deb 912cc965ed28179e14a277cdeae69c8ddd021a297f3d271b9eafd7dc95970969 89292 libnginx-mod-stream-geoip_1.26.3-3+deb13u10_i386.deb 59e6a386256e6ab28558f2a4bd86e9d9e824aa846158133bd6b33e62765be3d4 161220 libnginx-mod-stream_1.26.3-3+deb13u10_i386.deb b6ce5ec2f232456a9deaf68706fbd69bec6d5e0bfd400c09c6291cfea6843cbe 1227328 nginx-dbgsym_1.26.3-3+deb13u10_i386.deb 1061162a43d6f2657b04155b0e9b6b642f7d9fd34feb492df3971d9adc09d273 85196 nginx-extras_1.26.3-3+deb13u10_i386.deb 46ac1c020a7ee5b0822f714abf5e1972fc6489c647640ac8c6ddf1ed869de5c9 14187 nginx_1.26.3-3+deb13u10_i386-buildd.buildinfo 1d2b6248dda0d2fabf115c4d358d43e6ef04a750bae77caf1f2f21e26394c3cf 668720 nginx_1.26.3-3+deb13u10_i386.deb Files: 3c8cc0baae7d3c4bd3c697754e9b0a65 37160 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u10_i386.deb 03c0da925b5f06745a4bebac56d47df2 90208 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u10_i386.deb 699b998c583425be3a5836bec94c4b60 44860 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u10_i386.deb f4ca7e8d731b499d8660fc4c87749db9 93932 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u10_i386.deb dff9409f90415def1cd29e26a5d6a5b9 104380 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u10_i386.deb 2f1dc5cfbe86648eae1b6467fdc6fe77 103196 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u10_i386.deb c6be50b68285a2d33d0ee9f7b146f0a4 53136 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u10_i386.deb 6e45a4b25f85a696bc00f8c802da231f 92560 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u10_i386.deb 544c4946c28a77e6b80271d7903164f3 103132 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u10_i386.deb 6eac4244d5a287f65f8eb17b96e0b065 126324 httpd optional libnginx-mod-mail_1.26.3-3+deb13u10_i386.deb 35a0a60fac6a7558bf743238003f0a70 175588 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u10_i386.deb ea0bfac9f623abcc144312c4b1b06cff 23496 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u10_i386.deb c0a128dde4cf171b6e05e65072cd7799 89292 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u10_i386.deb 95bc654421e9447fbf4de402f3098d7b 161220 httpd optional libnginx-mod-stream_1.26.3-3+deb13u10_i386.deb 3641bb883ca3329bfc61dc1c234b2f62 1227328 debug optional nginx-dbgsym_1.26.3-3+deb13u10_i386.deb 3d0d70259014afa6196e94116e647e72 85196 httpd optional nginx-extras_1.26.3-3+deb13u10_i386.deb 42cc785216ab0cbce3010ef3ba8b1142 14187 httpd optional nginx_1.26.3-3+deb13u10_i386-buildd.buildinfo f14e0d38d776e76d67bad33b96c30005 668720 httpd optional nginx_1.26.3-3+deb13u10_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmrYmfIACgkQf2INRiCd aWJr7RAAmzVbr8IM8MnqQ8c94yHx9YDjEvjnQQu/ipaNJ18PpgkjBnLoaFGeSlhQ CjePN1UOQQVNJWnPS0hveGFpr0QayTCy2vHBd0+NFzxxx+UnBZx8WFBhqFXs0+QG bimQq8OmVl8h7vz9oXmJRusIVwgBtsdc42g3vi2hN0/zsjsjBAtWtw+ICMmZJ1bo 6FPKPVaBy3bXLvzPYAeDUREmwQnfsvb4XWKEqeym4+CP0kSbvC8hRCN5EgODgq74 BE9ygpUe8BvUQTwoJmJhUIqj51HPpw2417GOeULwBWWgp1/3yjUeeMPyhn3pLt/3 Fnh/X6qnTMgfJHjxCJZ5lRhAf66B0oOoqW0KFsXItyu2c5eiC2QYLpyvaeoNCZfZ Vl23fFKLPX5BAOUOBXKnF9dVqfY19jz929oSitloELYGaJbwat08dr+IvhP1CyEc NfWfOfQSnTY8WnOCnH1t/bVPys0zYjO6CS1dGTwmsvlkZU2lE7ccriYzxTMR1Q3Q yYj8oftSq0+Lu/okt53Tn8MlRv6byQD3vcBHK9Jm72bUM1rkElh4UKnhqsv1rv0A l5/kwNzDhjqzABng0PCdxhI/mfT83DuMWwhum5Rg5KLLGfEgchIp2/bMBCoWvzOz 0lrKYHv8OSk/Jh2D+TVIQgkFSwZLuFSbWuvOGTX8DyJQPjMHvPo= =JBa2 -----END PGP SIGNATURE-----