-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 05 Jun 2026 12:23:48 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: mipsel Version: 1.22.1-9+deb12u8 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u8) bookworm-security; urgency=medium . * Apply both patches to fix CVE-2026-42946. In the previous version, only one part of the patch was applied, so the fix was incomplete. This really fixes CVE-2026-42946, thanks to charles@debian.org for pointing it out. * d/p/CVE-2026-42946.patch rename to d/p/CVE-2026-42946.2.patch * d/p/CVE-2026-42946.1.patch add * backport fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256) from upstream 1.30.2 nginx. * d/p/CVE-2026-9256.patch add * backport max_headers directive from upstream nginx. It limits the number of request headers accepted from clients. Fixes remote denial-of-service exploit. And move max_headers from core module to the ngx_http_header_count_module to avoid potential ABI breakage and keep all the 3rd party modules compatible with the new version of nginx without recompilation. A big thanks to Miao Wang for preparing the modification. Fixes TEMP-1138794-BADE22. * d/p/FIX-HTTP2bomb.patch add Checksums-Sha1: 356e11aff9d7de7fef91c5d2d071cb649496959b 37396 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u8_mipsel.deb d2a15eda415207aecd81eb7359966ecdbda7ea5c 85664 libnginx-mod-http-geoip_1.22.1-9+deb12u8_mipsel.deb 9491943a08719abd686f9049f63372df45617468 44668 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u8_mipsel.deb 577a52183e8225f797cafccaf05544473fbec56c 88660 libnginx-mod-http-image-filter_1.22.1-9+deb12u8_mipsel.deb 14219eead69a8d70e8533091a9ea152a02210000 99780 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u8_mipsel.deb b20e9cab6af19967ef785e6815233d52bbc85ba5 96048 libnginx-mod-http-perl_1.22.1-9+deb12u8_mipsel.deb 0ccc287c11aefc64d769ea7e8d2ee3028157cb2b 53436 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u8_mipsel.deb 4fe9ee1adf279c0cb527886bcf34d4aedc4bf073 87304 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u8_mipsel.deb b2cf41f71e58a3c53dae944967e0ddf165534945 110756 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u8_mipsel.deb a9bba34058d9c092258a420668996d7f4623cef9 116048 libnginx-mod-mail_1.22.1-9+deb12u8_mipsel.deb 766702727fa5648c902e578c6c177ea889f45fcf 178528 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u8_mipsel.deb 25f3e5414cdaf67814ac830085fdf59ac66b03d0 23068 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u8_mipsel.deb 972a92785da807d36e6e7a2431735b637457658b 84864 libnginx-mod-stream-geoip_1.22.1-9+deb12u8_mipsel.deb 1d8d7b9982772efb3bb1a9625f6079e44aa60080 139296 libnginx-mod-stream_1.22.1-9+deb12u8_mipsel.deb 42fd918b779843037128ffb64dbe9782a547c2f2 1148796 nginx-dbgsym_1.22.1-9+deb12u8_mipsel.deb 2713b4b7e9fd2c07b530acee276917fcbc4e3464 81336 nginx-extras_1.22.1-9+deb12u8_mipsel.deb 85470380ec02bd0d6b15b83ac8ac12ada366f9d9 14090 nginx_1.22.1-9+deb12u8_mipsel-buildd.buildinfo 6fa7e62599e378f98b506b12e535123c41d15882 488616 nginx_1.22.1-9+deb12u8_mipsel.deb Checksums-Sha256: 226f9d5f23388cd804e58a34b1a549921104836ab363609f215ecbbb7f3d5929 37396 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u8_mipsel.deb 810726d6aac2aeebc44cfecba85f662a5c078e645500794a46182e6c2776b98a 85664 libnginx-mod-http-geoip_1.22.1-9+deb12u8_mipsel.deb 7ad550aa76e88379f8b8b5730bcbe99b7f418ff9538ce2d96e2fdc576c40f9d9 44668 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u8_mipsel.deb c03176f15e15068320b9f37e494754184a3f3cf21c3daa58b6efbf8fb8c1b51e 88660 libnginx-mod-http-image-filter_1.22.1-9+deb12u8_mipsel.deb b42c66ffcbfac60d80d026090c8d59c35e7d812163dfdb68942aac598288add1 99780 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u8_mipsel.deb 6062da6d97f73893517be620ae7b02d776f67a3281d4927e2ea410d148718d4d 96048 libnginx-mod-http-perl_1.22.1-9+deb12u8_mipsel.deb e74d8cd65e8cd2b986dc955d5a56a8cbd2b4d7f2b6816d2f73bdae1c54e5e17f 53436 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u8_mipsel.deb a7472cb16a0a2ef60539eac20891e11e2605c5ac49ba0c95fff6488e547225d3 87304 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u8_mipsel.deb 462d5659d4f6dbe17ae78bfeaecfceea47a5e884bdc17b8dbc61558adfe35834 110756 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u8_mipsel.deb c4323118c69047560f57923e4e618c4c30f6a0ce497ad761dc4059cc9e353296 116048 libnginx-mod-mail_1.22.1-9+deb12u8_mipsel.deb 18376bd49e296cce9b771f87bb29df971c88ee10b3f747eeea7f20b0ece12d7c 178528 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u8_mipsel.deb 0b64814f609854a07e9f3ed7de58beb4c23f6b2a2f705084a69c790d4ea2fdfe 23068 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u8_mipsel.deb 024975295b16f81831d637490c5d22e694c0ba42bef5a930a13cd4b7c7716187 84864 libnginx-mod-stream-geoip_1.22.1-9+deb12u8_mipsel.deb 88c9141b43cbebfbf13b319449e8b8f8bed13a77ed28885b1a0b96991bec9ba1 139296 libnginx-mod-stream_1.22.1-9+deb12u8_mipsel.deb 8338715f4f7b382677b5c1471d462fa87fdb56de93ee6b051c0d8413c284cb2d 1148796 nginx-dbgsym_1.22.1-9+deb12u8_mipsel.deb f4ac8af0329c5f77c61202f3ea2414c28067cef0cb3151822cc9631ddb07e81e 81336 nginx-extras_1.22.1-9+deb12u8_mipsel.deb c2f56c208238cf883c1e4965d5aaf398bb162a9ec813d7b3515b6882a6ac266d 14090 nginx_1.22.1-9+deb12u8_mipsel-buildd.buildinfo 92cce7493e44d4b697862891909ceedfe52d9093dd5c6d8c1cae943378dcf597 488616 nginx_1.22.1-9+deb12u8_mipsel.deb Files: b76ecfc437d66c075c7aefbb6fe0b7b9 37396 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u8_mipsel.deb 41da0e4f3d46ab26586660b93cc7aba8 85664 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u8_mipsel.deb 43a2795fd9fb150260c62727a6b90bdf 44668 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u8_mipsel.deb 9fbd76915f5741d24f18be75119956fe 88660 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u8_mipsel.deb b2ae7a2a48625d0f3262adf843583568 99780 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u8_mipsel.deb 755ce60e8c2fac57e19871427f395159 96048 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u8_mipsel.deb 819657d72996f12a94a80fb96afdd1fc 53436 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u8_mipsel.deb cc68d6901d738b5375083ccfb5880cfb 87304 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u8_mipsel.deb a1fcb475d70b4b8381ab04948374e972 110756 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u8_mipsel.deb 736834ae9a2de8490e92bb10f5c98cf2 116048 httpd optional libnginx-mod-mail_1.22.1-9+deb12u8_mipsel.deb a32c850697a9bcadfaf728163add3d47 178528 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u8_mipsel.deb 0dfa19d7135e3a4977e1bc9dd0ce3405 23068 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u8_mipsel.deb 9e90d9363f5676833205c872d8fb5e28 84864 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u8_mipsel.deb ec075fc1b45fbf6fb15676782787548d 139296 httpd optional libnginx-mod-stream_1.22.1-9+deb12u8_mipsel.deb 39e45076f09f6958ea2925f315400e18 1148796 debug optional nginx-dbgsym_1.22.1-9+deb12u8_mipsel.deb baaf995de0b9d7a3293f1d06f54e303c 81336 httpd optional nginx-extras_1.22.1-9+deb12u8_mipsel.deb 5bdf4b3e289bb7fe346b8dc7c4d24881 14090 httpd optional nginx_1.22.1-9+deb12u8_mipsel-buildd.buildinfo 6f6e03439e7a5505109822b55e7fa872 488616 httpd optional nginx_1.22.1-9+deb12u8_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmokM10ACgkQHrk2gTKe Wgi8uQ//TAkO0fkXw3RWpACtVT6q/1mreEKeRzUUWCUYFfpcF2yxKvM08nazNIxY jKGzEtSkNYYtP7PSSL+OZNe6+ClUlGIxAOmlH3zM4wjjQSE3xogSzugAVQchuLeJ Xa2Opx75Nym3TjrT8ojKEEvCUExWxsVOcwOS4HlyN05yYAHBCKS5jVPmMwFbCgJO qg3YtZYqWfvRwBWxMxsA94eQUFZmcW+9jb/MiIHfplzvFufNlJHRZoQeiu76x5aA vqdsQg7eoXT/Vc5r/o+Zf4Wus8/IXSWIGdbJyc+UKB54HqA97zaz19Tb9N1uq0Ll +ShzaDa2rTF0HfQwVlUPZxwv+N/JICoTeto9WCq8xGu9IfpcuymZbyMwvQyQu4xt rKSC5Ec6uejmnX1tafq95C3pnK9AckyTFaPfY2JWG/tntS+hB/uw6s8q6g6vrzQS RPm0IPv03ffqckfLrm8goqLIHwXutCXFL1R2CPxKnz+Nl0Z1oihFajjpg4IkbwPI H+zG5DyvyotvF4W2j5BBDGvaiQ2kMp1QMFJzZ3898S4waJfZuSCSxjQkpBmAA8HF OEijg5mDkkCtU+QMQ91dPpeB4GlxSTjAjxKuEiplXc0LT1mA1k/bCeTstzhxmYs2 NEbiCi3HgC3Gud0T9ui3/yB/Kv/01H+95wcDI/HVrt2qBBiYQIs= =w8JU -----END PGP SIGNATURE-----