-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 17:41:51 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: arm64 Version: 1.26.3-3+deb13u3 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u3) trixie; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: 13d2e4752aac3674c828875c7669ee4e11485b50 38060 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_arm64.deb 5c03441c2b7a1c1a535b95d1f4dcc9717cb83c89 88276 libnginx-mod-http-geoip_1.26.3-3+deb13u3_arm64.deb 8b3f3f9be9c898ae21baac21edc4e1da24867aa4 45544 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_arm64.deb 4916fced9f2dc58b3e355596efa85edbe906310e 91544 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_arm64.deb 89e0049dd8232c56906004b4021758beea98d260 108184 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_arm64.deb 3ba8eb9da4db044b387ced8facf5d24b9de8f2d3 99540 libnginx-mod-http-perl_1.26.3-3+deb13u3_arm64.deb 4dd51500adf4f7d40c0d459b29e92fb47e80ecb9 54288 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_arm64.deb 1e6e3ccb5ae307b0844ceae6912abb091ba6fee0 90328 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_arm64.deb cff2ab749a2ace52418b5ffe66433eecf24fe2e9 103508 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_arm64.deb baea1b0fc973fbd94e95ab52176b417cd2573962 119520 libnginx-mod-mail_1.26.3-3+deb13u3_arm64.deb be68bea3e8485f16c21a5b82588cbf3abb9f38d6 182320 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_arm64.deb 11b5cf16ea11689ba3273509cd108f0dfd1c096b 24076 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_arm64.deb 57a98d128c9bfab73a32a53e11d6c6481ece3284 87444 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_arm64.deb df5cbf18eef36bf64970b2aa868c520cd0a391ef 147792 libnginx-mod-stream_1.26.3-3+deb13u3_arm64.deb b2c503f1da73660c5caa76415d8f6e3b5534aeed 1305432 nginx-dbgsym_1.26.3-3+deb13u3_arm64.deb 9c5cf950d6bf0f303acfeb371e67d9f62e610462 83644 nginx-extras_1.26.3-3+deb13u3_arm64.deb fc8dcceab83d57ef4421848a9d64bcff46a0f27d 13909 nginx_1.26.3-3+deb13u3_arm64-buildd.buildinfo 3df642b7831e4ed3793fe9c603b6bbe21f71a23e 567640 nginx_1.26.3-3+deb13u3_arm64.deb Checksums-Sha256: 7e549a802a2b9e73f4dbcc467e3d6116eda396a4190937c1a293892d108b8fe3 38060 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_arm64.deb 359f74a1cde84978938e41a34763457f99eef9999b39bb5beb1904e5b30b0817 88276 libnginx-mod-http-geoip_1.26.3-3+deb13u3_arm64.deb 0a386bc74037b80319c31f15f699582b825f7beb05604dceff02e36fdf9b85ad 45544 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_arm64.deb 1f296c24f32f2eb2c24f16d5db6dd445698944c9b47feb2837f298a5ada5cd0b 91544 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_arm64.deb 0eb93c2c510df26f23bd5a4a737862715bddecd399c4780181a5f4a5c710588a 108184 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_arm64.deb 23e7c815063a5c0bb637397089458d1945207283fc7ebaa8f405d544c176fb65 99540 libnginx-mod-http-perl_1.26.3-3+deb13u3_arm64.deb fffb2adfeac235ae81af3dec68013cd698f88bb5dd89e568e5a5580d0d9d7180 54288 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_arm64.deb 433e15349a33560158d19b6baff6441ba497b8e75bb3ee8cdc6de2a84dbd24b6 90328 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_arm64.deb ebb191e6ce7796d306ca0b094e0fd01f97c357830fefa146e1ef47f83c9db12f 103508 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_arm64.deb 529bb0c101ff462608787b45902d3ee0c1badaae5b88eeb4cf095485c1b633aa 119520 libnginx-mod-mail_1.26.3-3+deb13u3_arm64.deb 0b8a08fd326d2b0c94672719cf25aabf36136a87cb64c0f6adbd13e211ef8229 182320 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_arm64.deb 42e2e1d9871f2df1586fdf93f522dffc98d1f619bb7d2f4d819867f9be7c8a18 24076 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_arm64.deb ee8dcccdb57e574e7f5127695a44810053cb86072535a3d8bc6c3bce24b3c341 87444 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_arm64.deb 52b8756e4dd385df9fa404680b7a64119d08b7f810f7396731e013db02d1bdb7 147792 libnginx-mod-stream_1.26.3-3+deb13u3_arm64.deb c3a7df80c14022c8fe379590dcb2bdb385ba1d4a858a2c923e3a9454c5482d5b 1305432 nginx-dbgsym_1.26.3-3+deb13u3_arm64.deb f3bd5c03e13309747f1a6fc144c979fb7b33f73475719d0cbabbf09c960170e3 83644 nginx-extras_1.26.3-3+deb13u3_arm64.deb 7ac994cb04994cfd7aa52f48dd11be6f714e5b61c9d57a922c25a22ba6ac223f 13909 nginx_1.26.3-3+deb13u3_arm64-buildd.buildinfo ce37b42f98b2e4a56f2c0f16606817956b5ef961d3143ab0fe46151b1d25bd0c 567640 nginx_1.26.3-3+deb13u3_arm64.deb Files: dd0b3b57d14e1972f42e53bd98204779 38060 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_arm64.deb 26f16be5f58c039f47a62efce54137c2 88276 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u3_arm64.deb e69f24164ee4e6f56d2b1f2cb7863dd5 45544 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_arm64.deb a0ab1706972db66647821c6249bae18e 91544 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u3_arm64.deb 14431276e455eaf3d579979d401a74ca 108184 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_arm64.deb 97ed2d5d1516658f4062bc969c71cdbe 99540 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u3_arm64.deb bbf255c56acec4a14d35542f4fc2cd47 54288 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_arm64.deb 0f434ac854957b2b01fe347532fbb56a 90328 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_arm64.deb a822c44fee858551de308567ddc0df90 103508 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_arm64.deb 4814d8e695dbc46b66968ca7721247b6 119520 httpd optional libnginx-mod-mail_1.26.3-3+deb13u3_arm64.deb f5a2a21be28d0f954eb3d47134041e1d 182320 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_arm64.deb de311b7e96435ca8c48f92bb4727014b 24076 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_arm64.deb 4d26239427ac482930565ce474da59a6 87444 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u3_arm64.deb 8aa0a755abd57a36f7dcf93d32c293bf 147792 httpd optional libnginx-mod-stream_1.26.3-3+deb13u3_arm64.deb e6dabfbc91282f28411bb3bac65f3c42 1305432 debug optional nginx-dbgsym_1.26.3-3+deb13u3_arm64.deb dfb99fb1e8960946daa4bb2a2be71743 83644 httpd optional nginx-extras_1.26.3-3+deb13u3_arm64.deb a6938ce48f53e1c518b850d8b7e2b7e0 13909 httpd optional nginx_1.26.3-3+deb13u3_arm64-buildd.buildinfo 3f87d8ffe94ffb8867a1a3c238b24396 567640 httpd optional nginx_1.26.3-3+deb13u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmn2WKAACgkQG5VHrWJm wgeK0xAAqmmalHpSn7e106JWtj+EDoGDZRN6EaNc5DgIB62cxMKY3EG/K+bDotr1 mxen7VVKAbgmOW8Fu00xmE1CAHl1L1rBco80AD86z4LE0U/Qm4w6RM9A6s5NJlcB 0BSFaP/NXX+2xDVfHygTcqEj9aCIqS8oWWlX1u0ZGpMHSKdRo4y31bajyDDI8HSX WHnkkCve5iGnhBcPvDrkUFpKT1AHNLHvvv6fXvjLvbnveq3eVqCFKkIu4U/QfbSO cpM66kmhXJ98VyBuPDBmVjArDSn7sT/Mt1eJjVwLdCNuexLOcZeNtV6rxpCzPLlV OWNAhe+tp0tQJFaRl+wneJrkRb7DnnCtCmnRl1/YDhb7OjECGo0OOUoUVflj1E6m 70/IaSrn7tbAQAIZjmfAvE1825Jwnl/8kQbCCjd36GMoCj4+O+VmrH0vTtWBlJDs VPbymL10Za2M1wnLx3rzI3f0KsnDxLTvqFcrh0Sm88McOB49/VZvh2QkrPvEFYTk 5YzyG7RceG4X907W0fJwG7ktJ0ihKTHLpNAS7XA4Idr3qfp8RJrtwL4JFQd+VThn ac3/Xz4OhwoRoTSLiLWDxBdlQ65EfBafspZFT+1FZsp0BLj53Fw85epZ25uexRlZ L1PVqbgjWwqNGjUWtSQ8egTDYzXOUYSOc1ZzoHRbdFT74LYKO5k= =gwM5 -----END PGP SIGNATURE-----