-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 May 2026 14:13:33 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: s390x Version: 1.26.3-3+deb13u5 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u5) trixie-security; urgency=medium . * backport changes from upstream nginx, HTTP/3 address spoofing (CVE-2026-40460), buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP (CVE-2026-40701), buffer overread in the ngx_http_charset_module (CVE-2026-42934) * d/p/CVE-2026-40460.patch add * d/p/CVE-2026-42945.patch add * d/p/CVE-2026-42946.patch add * d/p/CVE-2026-40701.patch add * d/p/CVE-2026-42934.patch add Checksums-Sha1: 05459e9c97197bec858f2ae5cc73e33dd0845a7d 37456 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_s390x.deb 4ee1d716fe42dd556865328e4499e4b6828bfe0c 88552 libnginx-mod-http-geoip_1.26.3-3+deb13u5_s390x.deb c836cd71ac13f1019e6e2abbc6fd890def9e09e7 45780 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_s390x.deb 25d1cedc70d5815012ccca2e038345dd00ceb8e6 92196 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_s390x.deb 6e7f03e712cf0506822d5e3824a044f41b8c8e68 109028 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_s390x.deb 97c14e333d6ce8f6dfe0a3d6a90ad081d7a071e1 100124 libnginx-mod-http-perl_1.26.3-3+deb13u5_s390x.deb 8f02caf4e90f055d6661ca0c709a152223499139 54372 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_s390x.deb 3ab09d26658d30c4db98d0d72590e0cac6f8be14 90644 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_s390x.deb a5ee2882a806cb12931c7380e1798b6e32028a0b 106276 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_s390x.deb 73db177e6223db4b7538cecac90e2518379db2ad 122796 libnginx-mod-mail_1.26.3-3+deb13u5_s390x.deb 4e27b2af7332937a7abaa7ed280ee67a60c4871d 187288 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_s390x.deb c014792a03f614c00156820a1c96765449e392f0 23032 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_s390x.deb 43adefe3ad1443322f365edc71d4b29bd1d0a559 87756 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_s390x.deb 4f14768e4af6cfd468095a1439e62e7f689e5776 151064 libnginx-mod-stream_1.26.3-3+deb13u5_s390x.deb abb8bdad42ef9aa007699dcdad7f95540c5674bc 1349412 nginx-dbgsym_1.26.3-3+deb13u5_s390x.deb 6315483dbfa304f92641098e0e8099c72e46292f 84120 nginx-extras_1.26.3-3+deb13u5_s390x.deb 8fd1df23482bec9c53c26786f328fe8ae151b78f 13669 nginx_1.26.3-3+deb13u5_s390x-buildd.buildinfo 2bb3e9ae4e2732d58825f4b6785d27a3f43d487a 597660 nginx_1.26.3-3+deb13u5_s390x.deb Checksums-Sha256: d754bfb783bbcabf98eae9bf585e1cca059ccbe6137cf9221e976fea99203572 37456 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_s390x.deb d40011153c96bd6f46146a9321a4b891f64df7c9cf799cfdb911f58a34d49a94 88552 libnginx-mod-http-geoip_1.26.3-3+deb13u5_s390x.deb 68b19611194e4514cdb43b6456797fe91083ce6521e9a5d5d229dd57ab9b2ea0 45780 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_s390x.deb 3e9bc850ab7ae61621d1b4992123711b0a9e63fe9f1e7a38c2d83971f7852580 92196 libnginx-mod-http-image-filter_1.26.3-3+deb13u5_s390x.deb 0df996506b4353a372ff1e5561c8c1a4b2e6f3947374bc0714acb90d21ba38fc 109028 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_s390x.deb 5aace00609e6c863a8ef2ec51e79dfb03e386397ca7603aab6543392c189c1b2 100124 libnginx-mod-http-perl_1.26.3-3+deb13u5_s390x.deb b47f43310d44c0f49478012746e8c21f9c9cf14b7f50ddbf7b2b78a84a748435 54372 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_s390x.deb 13492f6d5d2b49cbff743ef6f01ece65f4c23d4077f02e155c4691faabe65836 90644 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_s390x.deb 2b1f019690c6c998dc7e98d39c387a9a62b3b0b3c303ad9c1c9c8c9ede773983 106276 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_s390x.deb a0a439b2613c47bf98f161dc08a369473c75b2778a4c8e2e77eb0dfd26f01e88 122796 libnginx-mod-mail_1.26.3-3+deb13u5_s390x.deb 98012388c70e6c86ffa31de3c8a99fdc7c7d9d0f8cdc10aa05fdcda366e3be1e 187288 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_s390x.deb cfaab646baa2f99579c4522f3e2decee502f099ff873f20c4f0a38f17463a817 23032 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_s390x.deb 92fa5b19af78c6bbfd7277329045576368ab6a6299f181486b7ba50f9d978a28 87756 libnginx-mod-stream-geoip_1.26.3-3+deb13u5_s390x.deb 2fad1ce3378a45baa339233808fdbca2cd6529194e8cd54d2e82fa55ce8f8ff1 151064 libnginx-mod-stream_1.26.3-3+deb13u5_s390x.deb 6f9ac425c41904d9272a599c68c5a0900ec6dfddad9c346007fd94667836a540 1349412 nginx-dbgsym_1.26.3-3+deb13u5_s390x.deb 0aa00bdf9c0d3cf313097fccded558f2d2bbf7116070f1cfb1ec9acbca98043f 84120 nginx-extras_1.26.3-3+deb13u5_s390x.deb d52a23059aad62b6e5f6b8515d7373007d07e0c4a2a74f074564345bd36c8f01 13669 nginx_1.26.3-3+deb13u5_s390x-buildd.buildinfo 139666a4aa95ca9b1a6759802c3f15865e2e4172175b02f38e9a657dfa38f2e4 597660 nginx_1.26.3-3+deb13u5_s390x.deb Files: 0f5fd57f3b6a0cefdd8de087e2e8167d 37456 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u5_s390x.deb 509d07c0ab93fde841ba6af594c376e6 88552 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u5_s390x.deb 19cda1755d79aa3c08d863e063eeae5d 45780 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u5_s390x.deb 1482297e909043d61912a049327a5797 92196 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u5_s390x.deb 87d6de0b3e2d9c995ee400820050e66a 109028 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u5_s390x.deb 3d7673f52cccd3443d1fddf4d563e73e 100124 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u5_s390x.deb 3d067874931d2873abc602f694a0f99f 54372 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u5_s390x.deb 9ee6e32d28757ca005b5bc5c7c88afa2 90644 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u5_s390x.deb 19e798dfa07dd0e35db5025c822b5c4d 106276 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u5_s390x.deb 3ba7a02133e4198c6be8c297ce2bc135 122796 httpd optional libnginx-mod-mail_1.26.3-3+deb13u5_s390x.deb 1269a4295bf5d82584c7bedfa0b376e9 187288 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u5_s390x.deb a2b33c28238df861836fae5e12f150ba 23032 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u5_s390x.deb 54935e1fd7d87f9d5f75e5f6efc37a6a 87756 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u5_s390x.deb c276f37f39e976e8be20f18abc267e4e 151064 httpd optional libnginx-mod-stream_1.26.3-3+deb13u5_s390x.deb 13ccfed21d72d1c210ced2691016c36d 1349412 debug optional nginx-dbgsym_1.26.3-3+deb13u5_s390x.deb cc8d66fe0fa676a0b34d3de0ca6bc0a3 84120 httpd optional nginx-extras_1.26.3-3+deb13u5_s390x.deb 5920a219c35511c69c43d0f3fac360c7 13669 httpd optional nginx_1.26.3-3+deb13u5_s390x-buildd.buildinfo 50b986862034d13ee469ba94396be348 597660 httpd optional nginx_1.26.3-3+deb13u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmoIC64ACgkQMWUFebkH noR21g//fdkAMqw2dGYcgceVNLnNfn6d5rwtjk2RQrizwT5Dw+rEVBiUhd0s8Me4 LTndkimDJarTrPx+PYBCq8m2Mw7nfNBYMgppkfDDLV5hY1h4rfLC9UFSDvyuv8EH ei0X4Cjf5DdblC3EWdUK1ONxrQ177QMWmx85RRNr3uz/E3gthUgofyUdKezoEPuN ntbkwQL6kimdN23uV6Tg7s14IZeT7l5qnvIt1zWHqWjQBYUi9696W+lflIfWjR9d QpQ9cWXHS/2HbvGV2s7z3kgsNdlbNdTKZXVrRwKNXKX6FjEzg7LTcHEPPTW4QgNH TIH6N0uiFaschG+ylTxThmQa0dOVDYat1ZpEB3LoGoALht3zJUEIJw1N6k3cMDCB BbqPtNUNink8/XP1VhmY5B/ueB6EB/57B8Ve/ZMBCYv1b3b6dKCvVxHq0OwPXwpY Isc01Ly47lfqrprIP1TQFCx240qdhQVsEX2UFRBx9oSI6CjgjMpiBxgU0oCfly9Y /QW0/t86S7/AFZqbws2u2oisZ4T0OHXJWUhZ9FOeo6q53/eJDuacYYJOsSMmImXj 6XlDB3YCdSOgPVLJYBX9Qj3BmvwQDB1A2PFkJur9SF0jTddP0jVIpfwDHozMT/9t mrsJCCDdaVDYXpuAIM6/4yp2P/qqn4GXDXbvejsEGLHtlMK52Pw= =L225 -----END PGP SIGNATURE-----