-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 19:10:24 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: arm64 Version: 1.22.1-9+deb12u5 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u5) bookworm; urgency=medium . * backport changes from upstream nginx, fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755) * d/p/CVE-2026-27651.patch add * d/p/CVE-2026-27654.patch add * d/p/CVE-2026-27784.patch add * d/p/CVE-2026-28753.patch add * d/p/CVE-2026-28755.patch add * d/p/CVE-2026-32647.patch add Checksums-Sha1: 8670f99f8f89dc4b0aa13495bb5ee6c24c4edde0 36836 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_arm64.deb ea39317e5edc3f1490a1003688c16a305001602f 84964 libnginx-mod-http-geoip_1.22.1-9+deb12u5_arm64.deb c469ca54b6b1fe9b2345bb9750cb7e0cc9c0b3f2 43760 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_arm64.deb cb86bddaab4deca966f02e5f3eb42ba1f9170a65 88332 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_arm64.deb 4bf94c1f8875aa366fcf2d893a09ec29b62bd010 98544 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_arm64.deb c90e17463723653531eace2773da5739ac8b7712 96132 libnginx-mod-http-perl_1.22.1-9+deb12u5_arm64.deb 6adceef75177087475ccfcefc5903aad5a078458 53188 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_arm64.deb d9100f2aecbf03df70fd3a4c5ef3a22c04a381fb 86988 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_arm64.deb 53cb1d5a4e851555b034e70ce1074ce40526cf22 104564 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_arm64.deb be35cbbdfcc4cf36f35e1d479fbd98f94a0611e5 116740 libnginx-mod-mail_1.22.1-9+deb12u5_arm64.deb 605ca080470ec3943315aea3d619ac8f85dd8ce1 168576 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_arm64.deb 873bfdbea5b53093c97f04654b412bfdaebe9fcd 22596 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_arm64.deb 1e0a8402e888ae91d4f513475e38173a4d036e91 84152 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_arm64.deb 905ed8ac19336cbc15d7af4e438bee9158ac6068 139796 libnginx-mod-stream_1.22.1-9+deb12u5_arm64.deb 521965c5954431d18afb319bf5a01f15a7815429 1093408 nginx-dbgsym_1.22.1-9+deb12u5_arm64.deb 5e691796841fc5340bb973272344d763743c9df4 80484 nginx-extras_1.22.1-9+deb12u5_arm64.deb e191ff8c1088e9c627872bbab9dcaa85bd0fc5dd 14255 nginx_1.22.1-9+deb12u5_arm64-buildd.buildinfo 67e127f3135baddcfab7b387145c39cbe9e1bcac 495120 nginx_1.22.1-9+deb12u5_arm64.deb Checksums-Sha256: d989e20c1c9e17c0e8ba9914b6ed8093e77ebdd9620c52171526d2b0f1fde393 36836 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_arm64.deb b9e7ee217cf05e206257ac97cbb2a9a12da1a47da1612a5e275dacbe443b044d 84964 libnginx-mod-http-geoip_1.22.1-9+deb12u5_arm64.deb 8cca2c72c180ef4396eed110b85e69b30403f640bfecb51c93c1f6ec7a647ba3 43760 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_arm64.deb dceacc0af44b2d91194bc78a61399a95bce275b9b2dd6bb715f556979d29d987 88332 libnginx-mod-http-image-filter_1.22.1-9+deb12u5_arm64.deb 5e8504bb2fdaeb457ac1a4765ff000ca3149008ac68c7eaade712207a6a70693 98544 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_arm64.deb 5b67bee96ce604cfa6f24d98e38064ad2e7e8de257b5dbc3500d9215ce916c29 96132 libnginx-mod-http-perl_1.22.1-9+deb12u5_arm64.deb c05b897f82b94be15af1373f47fa089837d90c10565b7a69f7e414e95636a246 53188 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_arm64.deb 2b3dae33196c979074c5e3584739a4578d4a40f9c2fc9e7de1ba642f3edda479 86988 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_arm64.deb 4111d8689b2d146f9b5dd1e3c9dc05f1a1e4a8d5a16e3edf8fcd0b4fc3b0a08d 104564 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_arm64.deb cb741b4091e049b53c45bc141d4674caaf27dc1e40a068937f1d78a8b0eb014f 116740 libnginx-mod-mail_1.22.1-9+deb12u5_arm64.deb ad1e83440f90f7f1a2f7094f4b74f3779b8bbf922d57d3eb8987ec63ad49407d 168576 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_arm64.deb bcd0dac12601e3c6208b79b4689b1b80887235eee9e53a26b7c28fc60631e13e 22596 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_arm64.deb cc3a5b6a831ee5a23fed42f3dd44a92b0b35867aa6505ca970c33f392d84d7e5 84152 libnginx-mod-stream-geoip_1.22.1-9+deb12u5_arm64.deb cc37ca6124bdc3afca80700c005a5c27d9222a441474feb909ec102fff6c15e8 139796 libnginx-mod-stream_1.22.1-9+deb12u5_arm64.deb 2675aad682e4b962299672e6d3a93907a70321c3a8bb577016261532388824d5 1093408 nginx-dbgsym_1.22.1-9+deb12u5_arm64.deb 07dbc3e7134ce8a598f37fee2e3dd2ca8744384f10f8bfeff524bd701ffccebb 80484 nginx-extras_1.22.1-9+deb12u5_arm64.deb 9a1fa41729a2962a1064b2da38bea0be9dd99c3d53b212b300713e487e430789 14255 nginx_1.22.1-9+deb12u5_arm64-buildd.buildinfo b95bbb2662eefd6f841d15c22f4da08b6b845686ea606f54d290bcc3f598d1c2 495120 nginx_1.22.1-9+deb12u5_arm64.deb Files: 8f1758d46d71e272b716a20bc29a6d05 36836 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u5_arm64.deb fb5fbbfcc066a7c45eeb92dfb65c1f27 84964 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u5_arm64.deb c8e889b506a234f9ff567780e393c413 43760 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u5_arm64.deb f346fdbc24aeb96fdc10be3f35d040e3 88332 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u5_arm64.deb db7f4e5b9ad4edc9fe8a2bc14356a309 98544 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u5_arm64.deb 68f29f4ade70cabf06e447c024259e4a 96132 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u5_arm64.deb 8ddf2e84b62c62c8f5d13bbcc3b1775c 53188 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u5_arm64.deb e69199f2399a9e1093d37117016fc7d2 86988 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u5_arm64.deb b576bf688cc1f97c6ff7a97c192e94fd 104564 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u5_arm64.deb f3b2bb6e23d121da52e02a98c94b494b 116740 httpd optional libnginx-mod-mail_1.22.1-9+deb12u5_arm64.deb 0f2dd2cd70fb83cacd504b7a7d222ef4 168576 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u5_arm64.deb 9af2a287e4619a2386137642d80b8e5a 22596 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u5_arm64.deb a13020e8e2b582461d1366ff7c3d2b09 84152 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u5_arm64.deb 735418d7287e4bca14c2fc1d32aa2e46 139796 httpd optional libnginx-mod-stream_1.22.1-9+deb12u5_arm64.deb 679f524a7a73ad95976e32f27b6f95cc 1093408 debug optional nginx-dbgsym_1.22.1-9+deb12u5_arm64.deb e1dec348b51cc0ca1b4eb38548182859 80484 httpd optional nginx-extras_1.22.1-9+deb12u5_arm64.deb f1f37db1bf928f48c2be013b335460bd 14255 httpd optional nginx_1.22.1-9+deb12u5_arm64-buildd.buildinfo c20da9b72a1b439136daab4578a2518f 495120 httpd optional nginx_1.22.1-9+deb12u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmn2c9AACgkQxqCFmsOW goZA8Q/9HB/s96yskkOYUkvrG878t2Ndz0s2dI8BIf5/087NxD7U7MGbtGxeYiIt ZyLlfAvVWK4K2Tx3+wl2VUyyXOUB8fgZHKazRJMw/L16/OY0Jg3KXzCag/MZX2fa aCpeauImptxmdum9w1+EzXb7CtQvbbjtC2HAicEi6/cnECM9gfKYEIQE+V3VzoRq ycDzkzdIkmWFvPkim6PGq35NfcFfH5zXQPyn55oQY2v67Okoi2+VJsVBJejwJZld eHOG9SQKsdf58s26A3qRjQ2vGa+1SfZnWmaU6aZBUWhv/9uTcRtO+oeqEj33NMcP AjMimwlgEFZaWk+BpBe66FMSWG/2R7YEmU66j++V+mTbTTnTyqttOcFcMFhkpDzj M8HG70DQPwznGd/lxPma+glJ6guY/2z4GYjcqBfzklMNa79LfpjkCM29obCf0Zsp 6Fvf+Q3bY8cPiN6gqRb6cvYBzeSeuxTaGPVWWWO4vWLYXolZe7Kb0uzoOAJLLikq Os5O+Pw+qOqN11TofO3Mvv9bNwLjk3zoCwWHE8vdz7xBobzh0Pblba+J97qSktvh AYboV0uypFkIYDxORjCdWtqAK5goUQEVsh08OfKxrvJ+7zdc4GSXc61X9sDxB/r2 HtLwQHWumnK+Bkmbiqzo4brG0AAUevzj5uXn9FcEt7u5xbXRyic= =ZaXA -----END PGP SIGNATURE-----