-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 17:52:06 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: s390x Version: 1.26.3-3+deb13u4 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u4) trixie; urgency=medium . * d/conf/*_params: use "$host" instead of "$http_host" * "$http_host" forwards the Host header exactly as supplied by the client and may not match the effective request target (e.g. absolute-form requests with a conflicting Host header) this can expose inconsistent or attacker-controlled host values to backend applications (uwsgi, fastcgi, scgi, proxy) * switch to "$host" as a safer, normalized alternative * note: this changes behaviour, as "$host" does not preserve the client-supplied port; deployments relying on "$http_host" including a port number may be affected * it is workaround for Debian bug #1126960 for stable/oldstable release Checksums-Sha1: 09ff84f64248346ab34f953c022bf57955c73566 37448 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_s390x.deb 7d2ba1fe7092730ff42a0087a0a2f2778c3f5ef0 88396 libnginx-mod-http-geoip_1.26.3-3+deb13u4_s390x.deb ceabd376282318c4cf1ff697c6c12224da63ec1a 45776 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_s390x.deb a9cd47869034d811e30bbc2e0aa35bd1db26e5cb 92028 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_s390x.deb 2d97ea0ffb60dd3c261de1f0c9721ab6f9b62b0b 109012 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_s390x.deb 5e633b440eea622b74c8647ec74e770b079199e0 100000 libnginx-mod-http-perl_1.26.3-3+deb13u4_s390x.deb 1e4083595a23e88089fc1814003bea9cae9355c5 54400 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_s390x.deb 675bad9d41079b660970b3ff2b0963851b1611e4 90468 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_s390x.deb b7aee66f36eb14f9a9e7ef5bda6d54ec014f2fab 106216 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_s390x.deb e410ccdb1eafd26dd0d2b64c454b704b2dfa5d90 122512 libnginx-mod-mail_1.26.3-3+deb13u4_s390x.deb afc4e5b23b3d2f39b9b69fd0aa992d57cd4e9752 187292 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_s390x.deb f4e2b4694b78de6950cf805f3d672f236f76644d 23024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_s390x.deb fb1e7089de3666d0e7d0831647d4b5c12ceb4811 87588 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_s390x.deb 5d7caf81c91e43b37c1923209b15ff8b0ca078d9 150892 libnginx-mod-stream_1.26.3-3+deb13u4_s390x.deb ec4ac21291073b27205431367010deda5fd29076 1349268 nginx-dbgsym_1.26.3-3+deb13u4_s390x.deb aadebd859eabc282b43048221c0502f63ca567f3 83980 nginx-extras_1.26.3-3+deb13u4_s390x.deb 9a845e3bbb9f5d6af76fe246d64d8fd744df0baf 13669 nginx_1.26.3-3+deb13u4_s390x-buildd.buildinfo b3274dc1759e55bc0b16d450c70f321f1decde05 597188 nginx_1.26.3-3+deb13u4_s390x.deb Checksums-Sha256: eef78aced155bfe88588afe2897450ae6dfbbed68b8eeca360a0a91610a9a313 37448 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_s390x.deb c94458e06b07cc94cefb6aa7349a266beee7d56de8439abc8fbae5829e4e0b3d 88396 libnginx-mod-http-geoip_1.26.3-3+deb13u4_s390x.deb 9cdc4350019fbd9d96370f784f7a36c5ac6515e016a82cedbb4104b9815b0066 45776 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_s390x.deb a263034a592419cc3ab09d567d1415c1a4d0418b94fd96a7ab37f4aaccdbbe30 92028 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_s390x.deb 11cebcf3102bddd11399b05b240ffe600694bc752aaa047d6b3badcdb32ae118 109012 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_s390x.deb 6be8ab31b75e4b333cced8dfcf72014e0fababe8dffe3cb7142c2cb53663db87 100000 libnginx-mod-http-perl_1.26.3-3+deb13u4_s390x.deb 664c92275d467a9578bca52ef4f7da420bdfc5d097263793d00bc93a0fb938dd 54400 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_s390x.deb 067db52d1530f93a86386b37dd44057d3c5a7ab1cfef6a6732bbbf6eec1ff5e7 90468 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_s390x.deb 253c699271595bb6747ebf78c015f2aac99abb702f2fb007137bf4345e6c8e49 106216 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_s390x.deb b6ee90911d76d4914ef32244c3b38ac9cf4f080218e6143774b6d42b1200c438 122512 libnginx-mod-mail_1.26.3-3+deb13u4_s390x.deb eef689bb847989c5cb8fc3e5eb19fc5cff8171af73bc5ffa7e99f9c23d1a9f5f 187292 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_s390x.deb a75392312faa681a2f6ec79fd8079d622af7e1ae03b6afbc6fb207f83bba1a53 23024 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_s390x.deb f2ba781f6a8aa1ea94dfbe267286213bc0562c3de56df4c7a9d3e0d3caa859c6 87588 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_s390x.deb f474a0a1c6e166c2a4c55d8ddcba655a9658cd656050e60f23cb66501185e682 150892 libnginx-mod-stream_1.26.3-3+deb13u4_s390x.deb 134fb53196f124dcce73ee37aec7b77da738dda1f0dd6a90518efabd18b5fe6b 1349268 nginx-dbgsym_1.26.3-3+deb13u4_s390x.deb 62b4b5ad1e889d6ea32ce248bf8cd9091fe4c11d9d5a64698d24a0e3b231aee9 83980 nginx-extras_1.26.3-3+deb13u4_s390x.deb 6c4fa05c8e22ed749cb398e703406ba0382dfd18efc560c4201a8592eb44eab0 13669 nginx_1.26.3-3+deb13u4_s390x-buildd.buildinfo 0425c9f49dfe606e5f15db79d302f199a679894a78d133f4af97dc0bb0d5721f 597188 nginx_1.26.3-3+deb13u4_s390x.deb Files: 336374cb0c72be9afed3d537864d3960 37448 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_s390x.deb 96d6aad2330999bc71493914348cd755 88396 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u4_s390x.deb 73bb2c978c6bef8010d19f5a7fdeaebc 45776 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_s390x.deb c5233c26a4998df28e37df9333fe8432 92028 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u4_s390x.deb 45872626c36959cc009cdc706f9b54fd 109012 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_s390x.deb f7cdd917378923f82cc636446fa7684a 100000 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u4_s390x.deb db10b35df2a2a1016451b7bba8809f8c 54400 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_s390x.deb 7bbf686bd4ba446186b790b8626a8d8d 90468 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_s390x.deb cc26b35c5d5d73052eca479c269c6e4a 106216 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_s390x.deb 59c4d99c6a45694052f2305b230413fd 122512 httpd optional libnginx-mod-mail_1.26.3-3+deb13u4_s390x.deb 2377f65f5be0c5b5e11b3d13fed7fe96 187292 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_s390x.deb e1fb4e58785b15adf1f82bd9c1c840ba 23024 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_s390x.deb 49a946868e844fec62e64ccbb62993a7 87588 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u4_s390x.deb 4b68892fde6c9f5aac0aaa1e962133de 150892 httpd optional libnginx-mod-stream_1.26.3-3+deb13u4_s390x.deb 8d7918cea9099e397dca5f07a22dd600 1349268 debug optional nginx-dbgsym_1.26.3-3+deb13u4_s390x.deb 8d0255049b8fb43c144150dfc2c3446d 83980 httpd optional nginx-extras_1.26.3-3+deb13u4_s390x.deb a1e312c2708d729ee1df5f7130c02776 13669 httpd optional nginx_1.26.3-3+deb13u4_s390x-buildd.buildinfo 926044824b89797d2d838abffc6d5517 597188 httpd optional nginx_1.26.3-3+deb13u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmn5FsAACgkQkaCrxAR3 BY0Etw//c+45TnBtjWsdHyUPVoRcG8SOyJpxQgIqfvPZN9VGWNGvD88gOKNQWoDV hbpaxzio+phRlOeh0CA6E44rnSqubq0LaDXjIuQtuJOh3ODCzwmrKqQf3B3FRUni d3/Spr9eS1ypNEVQ9P7LRFJlbTmZXy4l85FFiIKlpBWTAO617JVTz56O+VIefDxi 7gd4lc3deWn5GR1ZFwKo+vWRuefC5TWFv+c1WF+hqG12nezhbPc2AoiWDao2H3f1 NZTPj+jqnYXWaUjKyj+gs6Ujr4uQFK5KrE+/63G5m8u6sDG7Yjclowp9QRYTbi0X OJX95X9PLwuDdOUcOk6Z0K46TypIxBI73bbbscP/fNa7YV3ov2uUGt+WYe52ScW0 xbMVO8IsOWn0MPOtkpMVgR51ExVxCzK6ZOHwyXjd/E8j81GJPgyyq1nF+PlK3WNh 6uVFdbnWaFW52MkA9T3TWawnhJyiYyC59sWNIorEoAvX4Hm48wM0pqwAHPJ0XpPf i14ua383zeLsmpxkIBe6bTbI2aOMTLHiVV/P7qS4NYVr6QICI3kZ0oUG+G8bTJRB PDhs3BMZM63uXxVi+ma+0wIBmPMyQvK/wQEOhwJisbIOIc+jb73G4o9mCDxOX+Wp yp0X9gVmIPqaL+lGAqY0mwOgO2LB/q+1phJmyTo0NCt0hpy/2h0= =K+8F -----END PGP SIGNATURE-----