-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 17:41:51 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: riscv64 Version: 1.26.3-3+deb13u3 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-03) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u3) trixie; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: 84407e439e88706ae988aad48f0552263193be4d 37988 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_riscv64.deb 26ba5eba99719ee02811258ab1ce5ce15bd69b94 88380 libnginx-mod-http-geoip_1.26.3-3+deb13u3_riscv64.deb 655cf4fd34929014809c8821ab450fa73cbd2964 45040 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_riscv64.deb 7ccef6d5886cbc38101f80ae604eb8d54fa1ec24 91908 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_riscv64.deb 882082faf6b2f34ee9bedc4ba20a8c10f1a7b1ad 106864 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_riscv64.deb 04aff0e0d54470c0357da08e154160b3c54ee89c 100308 libnginx-mod-http-perl_1.26.3-3+deb13u3_riscv64.deb 28f109105cab62d8647665f160b8bdc5a8551a45 53980 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_riscv64.deb e868b9c65e58f552b4ab6ec3a6a7cb224c569918 90300 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_riscv64.deb 8f123fe5e19a4178690fb82194d77448cead4525 103768 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_riscv64.deb 779b3249dc195745a579c8a8b4cddff06fcb0928 123656 libnginx-mod-mail_1.26.3-3+deb13u3_riscv64.deb 3958dcda45cde0aba22216761b870f738eae0e5d 183656 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_riscv64.deb 31da3e7762d543abd99ddf95720985741718bee0 23988 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_riscv64.deb 963af5eb05e21d9b5623dd650b477b6a3f8adcb2 87652 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_riscv64.deb a3e8a499005386b9fce9982b8ab65941432cc21c 154800 libnginx-mod-stream_1.26.3-3+deb13u3_riscv64.deb 8971c4097419f801fa942b6fc62e9039dce2ed68 1314588 nginx-dbgsym_1.26.3-3+deb13u3_riscv64.deb 04547accc1c18050b465d6f9636a68bb66f8db2a 83644 nginx-extras_1.26.3-3+deb13u3_riscv64.deb 5d31e16fdbf733ea48bae0a35c40ca6f00e3322c 13959 nginx_1.26.3-3+deb13u3_riscv64-buildd.buildinfo 954c871158aa431a942fb17f47657565db1242a8 629480 nginx_1.26.3-3+deb13u3_riscv64.deb Checksums-Sha256: 3bd9013607853e7182990bbd3b8b976a0e720f95d8d0316a2f69a7ee25e7f8f0 37988 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_riscv64.deb 14251e36d2fdcd268614e77c23d879154dc7d196459e29cb3eb1ed4df05ec87d 88380 libnginx-mod-http-geoip_1.26.3-3+deb13u3_riscv64.deb ff36a3676b02aed6f8403cfd0df01b3ca12bec46ba83239d4cd6b9b051e82079 45040 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_riscv64.deb 62a688079856a25d6c559ab3c5b25b87efd1322e4882b0eef4787a72d7fbe8f3 91908 libnginx-mod-http-image-filter_1.26.3-3+deb13u3_riscv64.deb c5893463b1bf753ef3d9b1ccf2ee3e41eeeeb50da4d44627488e66c928193b0a 106864 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_riscv64.deb a7a51e277936bf7ad44c7cc0f3a9bc18ee6c231a2b1dba6e24fe740463c340cb 100308 libnginx-mod-http-perl_1.26.3-3+deb13u3_riscv64.deb 409df700e4b9dc598182bd13cfab94ab4f46b80e2a7a0a880045afea8c348d75 53980 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_riscv64.deb 37e4b66dc13ce0237b9df570c36d0d2d221246000fd242411385e0785b627f32 90300 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_riscv64.deb 4ed0aa15e2592f6d0c3a445ad1aef76eab1c01ceb034ef8023fa584874f02f78 103768 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_riscv64.deb 5ac96f8ec215acdbdc535679552b1f97c7078a66db1a928afde5d13f6cf77297 123656 libnginx-mod-mail_1.26.3-3+deb13u3_riscv64.deb dcd4a82b66804832f29592ff0dee865a9664022610f44639f5f2d1b7696e629b 183656 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_riscv64.deb 9cedf5b9729cd572e3ba72d1725e9734868c151f4ed99e8f5de34275f397a7a8 23988 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_riscv64.deb 9a9ad3b39a4bbd8658127b870bd18c2d6a87c6cb9baf1d16fc2d859d7dab66b5 87652 libnginx-mod-stream-geoip_1.26.3-3+deb13u3_riscv64.deb 0b126e028d91582881451352a8ca6980d18bb7e7b14defdfb954285bc739e768 154800 libnginx-mod-stream_1.26.3-3+deb13u3_riscv64.deb b5e2853ccded9bb01e177d97ca077dbf49d2429d6970f52e3ba7969fc156d72d 1314588 nginx-dbgsym_1.26.3-3+deb13u3_riscv64.deb 913b91c8cd7d85a9f6da2bfdae4776acaefe66e73e5742ef935bce9ced32e6c8 83644 nginx-extras_1.26.3-3+deb13u3_riscv64.deb 991c770dd0343bd2ddf0c9d58d14a55feeb4845767da6dfe109513b85686f7bb 13959 nginx_1.26.3-3+deb13u3_riscv64-buildd.buildinfo feb523a246bc9a2bdb685fcaad4c9a6c1df3ab2e7928729169cb8e7e09011620 629480 nginx_1.26.3-3+deb13u3_riscv64.deb Files: 0ffffc295428cb80f5d16fd35c648433 37988 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u3_riscv64.deb a07a284ed5a3f94da3d316785534e168 88380 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u3_riscv64.deb da6aa328d4683aebd69e9c52d25cd8a1 45040 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u3_riscv64.deb 1b4732190b259a632bccb7f16fd4a6a4 91908 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u3_riscv64.deb e1627939d6069a9a122d9535f70f9932 106864 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u3_riscv64.deb b11cfa46a6305fd9cae80b2573224255 100308 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u3_riscv64.deb 049187b92eb33d8cae625d0cc860c08e 53980 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u3_riscv64.deb 74a523fd4cafc44a12a0c4103b1e72a0 90300 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u3_riscv64.deb 0337c7ed3f5e9eefac4b945e23dad721 103768 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u3_riscv64.deb dd614d3617ee4da0637c2544e414e289 123656 httpd optional libnginx-mod-mail_1.26.3-3+deb13u3_riscv64.deb 7872a09be514c29232e3ee19a4d7817b 183656 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u3_riscv64.deb 832fa24c996fcea009f6fdf3d4be25a2 23988 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u3_riscv64.deb 758638c2aee3bbe1c8a2577cac928fcf 87652 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u3_riscv64.deb 4e5ce4f727639dd48bfdc08e42649be6 154800 httpd optional libnginx-mod-stream_1.26.3-3+deb13u3_riscv64.deb 20c26e574f254b6cae68661d6f738a4a 1314588 debug optional nginx-dbgsym_1.26.3-3+deb13u3_riscv64.deb 4d207935751701958f8c4f4b359a0e52 83644 httpd optional nginx-extras_1.26.3-3+deb13u3_riscv64.deb 6fa435829190b786647cded8646e6ee5 13959 httpd optional nginx_1.26.3-3+deb13u3_riscv64-buildd.buildinfo 9870b2333504440f4af4d241425b963f 629480 httpd optional nginx_1.26.3-3+deb13u3_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExv8RwtKAmv8J56r/6ETk30hvxtkFAmn2XFMACgkQ6ETk30hv xtmQlg/9FY+UA01IwHW9dT5zSPjTQB9nbhF8stkS8NCC557++eFevXh1NVdHBlVS pmmVpmkzMeePSjuVbX2A/MA/7ZV0YMrZ//qlb9HkCnAadT4BCQ1Xy4wzZokqVkRc j7jqvVQxejN/AJ9A0J41It7KLaw5ceA6T+eyAqYdrAEBIeDIJllL5vu+ipz69vMB k6POXbLCSGms0/wGRGKu0t092Cl9MQG7TTd/Nxst7OuUlEf7BIvAuvjyBTUQ5J/e G6sXv+//ADSopjEHdDtr1m4/gfVd3nygBMvThZGhwN9c154UXlN/wvSG8N06JRcO Th9IMuizKo+NcRYW3H9lQflqRiBzmoBDlIJQ6HgVFh+0YHf4aU8sCH4SqyVrE4DA FJI4FLMJwc5yTKlR+OQMoGnjP8qd3jhhRRquvEyYFlfrdDOPJFZIvcpYEL5ovZN4 C6ofCoX2JkaY7UOEUz7HY8AuLWX+LjNmVb9S52RxdHtrQqp305RhEZrkd/Yk+chb KNVcwe7mMYuWJpBMsJ1oWRZshsvGDbOQPu79VXF47k6g7Du7SZYvYkX2XFVZKHMv uLN4zOFyn35E0hhXweq3AhV8mC/1U0Zk/bugvwiO4RdcWZUft6ePsKA7oEpB2TcF 45SbInnIXtjKghmozxn0MPstmG7Xt8oZ2fAxVDK+vfx58BVtFP8= =aDG9 -----END PGP SIGNATURE-----