-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 May 2026 14:05:41 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: amd64 Version: 1.22.1-9+deb12u7 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.22.1-9+deb12u7) bookworm-security; urgency=medium . * backport changes from upstream nginx,c buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), resolver use-after-free in OCSP (CVE-2026-40701), buffer overread in the ngx_http_charset_module (CVE-2026-42934) * d/p/CVE-2026-42945.patch add * d/p/CVE-2026-42946.patch add * d/p/CVE-2026-40701.patch add * d/p/CVE-2026-42934.patch add Checksums-Sha1: 8ef09f43c4545ac10a0f71a538139d2bd5fb438d 36804 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u7_amd64.deb 70c5b500774033ee5e0631518f008ed171053dc1 85412 libnginx-mod-http-geoip_1.22.1-9+deb12u7_amd64.deb 151c9cbf70020a66b249046f1c5e3514086752d8 44068 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u7_amd64.deb 7e63051c639bba7fff55ab18e204b12002498e70 89108 libnginx-mod-http-image-filter_1.22.1-9+deb12u7_amd64.deb f668b0104659a518cfd87ff18c12de5bbf9f3b46 99708 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u7_amd64.deb b6dedec5e81fb7ef8188570452a515678be59fc8 97256 libnginx-mod-http-perl_1.22.1-9+deb12u7_amd64.deb a26a9a6268941a47f963f5ed03410975a4491671 53292 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u7_amd64.deb ebde968fa0e75e93ec9f980ad62ff4e5aa59ed64 87584 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u7_amd64.deb dcc36d892610049fb6d9bb2426c103584f6e4c93 104844 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u7_amd64.deb c93f4638b20c9ad0da2b5bc0aad506c8db4d6682 119512 libnginx-mod-mail_1.22.1-9+deb12u7_amd64.deb 39a658d4752a0e929815093eb342df4785cd761e 171908 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u7_amd64.deb 0ce48641220cc20012286373978765e2c58366ef 22488 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u7_amd64.deb 91ceee91b8e7bc01a99522112003673a6da5568d 84620 libnginx-mod-stream-geoip_1.22.1-9+deb12u7_amd64.deb 33a4b158e21a539892cd00295b192dde7a2f0eb4 144632 libnginx-mod-stream_1.22.1-9+deb12u7_amd64.deb 61f71d8ead67505dc7eb337afe4075229fd54025 1118272 nginx-dbgsym_1.22.1-9+deb12u7_amd64.deb 72fd9c055aa9f9a0f9fa5b004e752d67a59d76b0 80928 nginx-extras_1.22.1-9+deb12u7_amd64.deb b76a152010e02594476dff1828f64b58418785d8 14256 nginx_1.22.1-9+deb12u7_amd64-buildd.buildinfo b70dc4be6ad4bdd4b341278673e8a6b112cbcd57 528808 nginx_1.22.1-9+deb12u7_amd64.deb Checksums-Sha256: c97da6b9e6948773853d9d673dde554e1a3bf2629e3db80c19ec04b61d0d3ab7 36804 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u7_amd64.deb c8d5a719214dc4b57425708f0d3e9fdb053b8ff3bd8461855df119e1d62558a6 85412 libnginx-mod-http-geoip_1.22.1-9+deb12u7_amd64.deb 356146db1273ec32563b4ecb453cbbe2fb2ec78967e9dc83c6dd20da1896c327 44068 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u7_amd64.deb 0f04f98d6bf918671ae5faaf8187767e7812965da9d0e7788880bc4ceca1067d 89108 libnginx-mod-http-image-filter_1.22.1-9+deb12u7_amd64.deb 07d6768715cc258ab142818985e6de8d85632dce7878f960f9ed539eeaa22613 99708 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u7_amd64.deb c79b3267a804dcbf960f98dcdf7692a380cf9f6168f3b72d81ad810fc40dc168 97256 libnginx-mod-http-perl_1.22.1-9+deb12u7_amd64.deb f5a1982a0580a3ca7008a0c78cf6e25f147b4b5ff9babe86fa33eb311a64bac4 53292 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u7_amd64.deb ff694c46452592489a9eea485baae6abb85a43c0a68b07c8c4af28e89f03af22 87584 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u7_amd64.deb 32e2da2cde7d035d9ff00f0e7a643cb04be18ebd87cb078dfc493e2d3f41ff30 104844 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u7_amd64.deb d70717f9d660a6284c08315a0dedbd7de88c21dd7ffda53f10c507a85951b56d 119512 libnginx-mod-mail_1.22.1-9+deb12u7_amd64.deb e8cdd4aa7606ed028488480cea2a3507719e96465ba2a7bfc169dc2dae3c8a84 171908 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u7_amd64.deb 4f93c4140441435ef380b5643db6d9e877a341ee6b42493eead28de7847b5e9c 22488 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u7_amd64.deb 8891b6b817cc56c6cca9402fbe9ad5131573b9291582d42a8ba123a7bd41576b 84620 libnginx-mod-stream-geoip_1.22.1-9+deb12u7_amd64.deb fb492a31370dc0b9ee417377752e286a200384c9d7585ecca40ca118d7ffb40f 144632 libnginx-mod-stream_1.22.1-9+deb12u7_amd64.deb b75d59a8c0007320a04d973de648803736cc95fd86e4f5d3638d7ecd2826e60e 1118272 nginx-dbgsym_1.22.1-9+deb12u7_amd64.deb 3dcf64c7d53e358f405bca496f4de305a0d8ea6b02ad74c2029dcd33f8fcab28 80928 nginx-extras_1.22.1-9+deb12u7_amd64.deb e0f185c26e870d02cbfe3b600ec8a541e02a1201c21f81d1e9d5255bb4b80d8f 14256 nginx_1.22.1-9+deb12u7_amd64-buildd.buildinfo 28be5ecfbd760c554abbf759de86d027382d21e2890936edb28ed1053657318f 528808 nginx_1.22.1-9+deb12u7_amd64.deb Files: b619a94f3c56fa1370ead0035df151cc 36804 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u7_amd64.deb d70424edac4b16963b2a98a5e96fc71c 85412 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u7_amd64.deb abec10f881fdd9e7a0bc245406943e2e 44068 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u7_amd64.deb 46b16a11baa8b28a25801063e8553ba8 89108 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u7_amd64.deb 31604f0953ebfc0e52ea919e6d8e29b1 99708 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u7_amd64.deb 12356b6fe1b46dfcb5e8acce86127eaf 97256 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u7_amd64.deb 40084ab73a231ddee62ef1b6fdc8edde 53292 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u7_amd64.deb 79ba762a179e6b21662dec443bc09218 87584 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u7_amd64.deb d965b03d205098be402bbcca2bf70a2b 104844 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u7_amd64.deb 74f51f3d233f1a19b758429b16321260 119512 httpd optional libnginx-mod-mail_1.22.1-9+deb12u7_amd64.deb 39db4da51c2f624608212afd7aafd988 171908 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u7_amd64.deb b4721f8c0359129aed7c610a61e2daa2 22488 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u7_amd64.deb 12ae6494103aa034c961202d2b00e9df 84620 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u7_amd64.deb f0683cb278b1ad4818ba5d76492efc78 144632 httpd optional libnginx-mod-stream_1.22.1-9+deb12u7_amd64.deb b687f827ace5a5e75d2b313c3b5f7ced 1118272 debug optional nginx-dbgsym_1.22.1-9+deb12u7_amd64.deb fe4359514c284030c8419bac334b3563 80928 httpd optional nginx-extras_1.22.1-9+deb12u7_amd64.deb 0eb614ba878e021b4fb5541b980f27ae 14256 httpd optional nginx_1.22.1-9+deb12u7_amd64-buildd.buildinfo 2cc8c92b2d892aaacd871f52c0026370 528808 httpd optional nginx_1.22.1-9+deb12u7_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmoIC+EACgkQbheoBegw XLK9ExAApin4bJSDCtWYM9Lkm9aJr5g1gdAS2TDdK070fi65sUluUt/Ic+ZtZs2J GMVMqvAGzahdgCDdBeGR/dbeQxSN9Pql5SwnCeAxvovuQOj45Y/zPFKmDY8Pt9Qz r70coNcbGIHt1QeVlKFtrvlVki9FxT1xYt5It5h+LYIa3OHBXZ7oViO96o1Zowgm 00EJxeYC9pklRI3ku7NQaIgH4RJbpD8tcNAEuDejxduR5nROYp9UVpjx9E9ZHsQV G2VgCjNGovkdIlZqDTi0TAl+LeqlnOTcOxx5at4Bk0qfB2e2BaoFtEHWBF8L08o6 IT/u5i9ywkOrYH4KI/ED7dIIYaSpMhdpymfUGc/QwMCKQZrtVAvyMqrQcrpzzuEE GzxTImZ+e4ly30tWgKGgqnJI/zQgu61UUwAzcVCKy42FgYdOGFcdAW7gHilglDHK NaeRh5O6kdN5EpSdhPRMf4klQPU0+Xy19GGazneVjuKK2c1lsg29pMLCJ7/Aj8KQ Fqb8HpQcL/IOADWWaXqjdxcgTkTPcZsLy0ZaQEuZ1VfMk+jXJh4ssjPVVyTfcdXi Y3G6mPgPf7J9NiOCW+fVdLVIjDTM3bBfOy0HqCu0S31QKArsjxcf9W7kSE1F+cm+ PF5TzhojMprqmeU90JzQh0+3vsS5iJoBcJyVklaf3k3aX9p5VJ0= =rRjV -----END PGP SIGNATURE-----