-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 04 Sep 2026 17:02:15 +0000
Source: nginx
Binary: nginx-common nginx-core nginx-dev nginx-doc nginx-full nginx-light
Architecture: all
Version: 1.26.3-3+deb13u8
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Description:
 nginx-common - small, powerful, scalable web/proxy server - common files
 nginx-core - nginx web/proxy server (standard version)
 nginx-dev  - nginx web/proxy server - development headers
 nginx-doc  - small, powerful, scalable web/proxy server - documentation
 nginx-full - nginx web/proxy server (standard version with 3rd parties)
 nginx-light - nginx web/proxy server (basic version)
Changes:
 nginx (1.26.3-3+deb13u8) trixie-security; urgency=medium
 .
   * d/t/abicheck add, detect unintended API changes in the nginx-dev
     package by comparing header files with previous version
   * d/p/CVE-2026-56434.patch add, backport fix for use-after-free when using
     ngx_http_ssi_module (CVE-2026-56434)
   * d/p/CVE-2026-60005.patch add, backport fix for memory disclosure
     vulnerability when using ngx_http_slice_module (CVE-2026-60005)
   * d/p/CVE-2026-42533.patch add, backport fix for buffer overflow
     vulnerability when using map with regex (CVE-2026-42533)
     A big thanks to Aron Xu for preparing the patch.
Checksums-Sha1:
 73ec9b3e4bbaacb7e452c14e6e81467575d3e75e 111428 nginx-common_1.26.3-3+deb13u8_all.deb
 7dd1689a6313f3fd56e25a30ba9192137e2fb593 84624 nginx-core_1.26.3-3+deb13u8_all.deb
 ee228f4e87615e14e47953e88a754015fa33c4d4 197476 nginx-dev_1.26.3-3+deb13u8_all.deb
 09bc5ea92dba62670abc673c8670f2e493f280ab 92736 nginx-doc_1.26.3-3+deb13u8_all.deb
 e1e0276aacb84ae0073e502b51faafb363afcacb 84648 nginx-full_1.26.3-3+deb13u8_all.deb
 08ca6ad9f10db5ee5d6944a881372e0d348dc831 84400 nginx-light_1.26.3-3+deb13u8_all.deb
 64b851952551bbdfac669dc0d3f1e318da74c772 10114 nginx_1.26.3-3+deb13u8_all-buildd.buildinfo
Checksums-Sha256:
 4947615078bbc9457995a2a077da94c60c326e95503da83f55b2d197ec471250 111428 nginx-common_1.26.3-3+deb13u8_all.deb
 a6837fc1a6d84f0e0af1faba2f1bbe6989916b8fe1b9268875a36d8088789d8c 84624 nginx-core_1.26.3-3+deb13u8_all.deb
 52bf222e45751082a055f7a13f04027b3bb3822a89a5eff672a7e80badb0b9c6 197476 nginx-dev_1.26.3-3+deb13u8_all.deb
 b952337c50758c60c548fb259861f8b59cd84f315d2ecb523bc5f4a8dd1fbeed 92736 nginx-doc_1.26.3-3+deb13u8_all.deb
 f78d809c0b629d80f4f69636ad7f44ffdc6c5b42cdd656579b05515dc89df06d 84648 nginx-full_1.26.3-3+deb13u8_all.deb
 2978d0b5e446e0cb5ad6f4b223be3403244def704d794e77969051cb4aca35fe 84400 nginx-light_1.26.3-3+deb13u8_all.deb
 e7c42971b8ff1f768765ef911c3b62b8709ac6c3efdedae98571789754a9a4bb 10114 nginx_1.26.3-3+deb13u8_all-buildd.buildinfo
Files:
 8e3f25d016b3e3bf25ce7a71ad84d92f 111428 httpd optional nginx-common_1.26.3-3+deb13u8_all.deb
 1d2527a93298fec47cc67dd55578aa72 84624 httpd optional nginx-core_1.26.3-3+deb13u8_all.deb
 15805f5791ca9965579d34063f69bee0 197476 httpd optional nginx-dev_1.26.3-3+deb13u8_all.deb
 cbc23a4b153acfcfec713c8d5884b54f 92736 doc optional nginx-doc_1.26.3-3+deb13u8_all.deb
 a75fcbcb2a0a86bcacc030e530ecbbde 84648 httpd optional nginx-full_1.26.3-3+deb13u8_all.deb
 d0887ad88381328ce899df5e4b24c90a 84400 httpd optional nginx-light_1.26.3-3+deb13u8_all.deb
 dfb2a356d785ffc1de109f0bcc4ccfda 10114 httpd optional nginx_1.26.3-3+deb13u8_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=BCve
-----END PGP SIGNATURE-----