-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 17:52:06 +0000 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-dbgsym nginx-extras Architecture: ppc64el Version: 1.26.3-3+deb13u4 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Jan Mojžíš Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-extras - nginx web/proxy server (extended version) Changes: nginx (1.26.3-3+deb13u4) trixie; urgency=medium . * d/conf/*_params: use "$host" instead of "$http_host" * "$http_host" forwards the Host header exactly as supplied by the client and may not match the effective request target (e.g. absolute-form requests with a conflicting Host header) this can expose inconsistent or attacker-controlled host values to backend applications (uwsgi, fastcgi, scgi, proxy) * switch to "$host" as a safer, normalized alternative * note: this changes behaviour, as "$host" does not preserve the client-supplied port; deployments relying on "$http_host" including a port number may be affected * it is workaround for Debian bug #1126960 for stable/oldstable release Checksums-Sha1: 2b85708699e1fbd711fc11ae0485445c3c8ad8c2 38460 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 6ee48c263360063f69a34f78b2eeec3273794516 89232 libnginx-mod-http-geoip_1.26.3-3+deb13u4_ppc64el.deb dd899b97522b364035f1875ecfc1ad5d535a0655 46672 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 2ee2b3a8bd7a67ed9ebf0f1443dda4e7e80175cd 93108 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_ppc64el.deb 1edd57552f3806c1e9207211ec119ed065cf0fe4 109820 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 8dd27bb426563a9af996b761c5115124299ea0f6 101544 libnginx-mod-http-perl_1.26.3-3+deb13u4_ppc64el.deb 1bd2c9b7a19d144e2693bc0c0e5f6339e5f16387 55008 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_ppc64el.deb f4519b3b1c6c9d1ca81fbf4344774c49c228c75e 91832 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_ppc64el.deb ed632789ad8b87bc2fbce1dc290eefb6d81e2c1a 108324 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 9cb1e1ddc7b1e9d86f9fd7923b66d6156ba794f5 126064 libnginx-mod-mail_1.26.3-3+deb13u4_ppc64el.deb a82e7404533dee9e762fee6155d93f6bc0309c96 192896 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 02f50c9143afaa61e3d0b88e163b0d7434853d7a 24304 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 193f0811a36e063332b6099147ca533ff27138dd 88400 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_ppc64el.deb a0c4b5fe43197358fe3755530165fa3a176155d4 162268 libnginx-mod-stream_1.26.3-3+deb13u4_ppc64el.deb 7569fde1afc4368ca9064b33b606934f316f6702 1387616 nginx-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 16c57dd2bd1983837f35a41f70e0912b82182578 83976 nginx-extras_1.26.3-3+deb13u4_ppc64el.deb 5ba6fafcad1a5c2fb2c4b9c016f5da255065addf 14014 nginx_1.26.3-3+deb13u4_ppc64el-buildd.buildinfo 62c992857704a6ec8adea0f9156c428ee5f26166 653216 nginx_1.26.3-3+deb13u4_ppc64el.deb Checksums-Sha256: 71abf9932f1bbf559190a3cf96335cc14245bca75c45cbce9c6558f38a8c3f6c 38460 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_ppc64el.deb a62c4f1a71d52e8e788697b5e310c18d48d8c3503e046b81a438e3ec040ed156 89232 libnginx-mod-http-geoip_1.26.3-3+deb13u4_ppc64el.deb 696c84e0bff086123cd719b7ad6bdc3c49ace2c6efd1466276c7caf45966dff7 46672 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 0ca2bffde07752cfdb7db9f1ae04863cc0f16522af1c6cce36d8bfd53e2a3e33 93108 libnginx-mod-http-image-filter_1.26.3-3+deb13u4_ppc64el.deb e5b4e21baadaf5ccdf54fc0aefd682a3b3ae866c153eb66faa1ed984beba3ea1 109820 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_ppc64el.deb d8b7e3493bb8a2934494c6656234ac17d634a93bd31ece36863e682a5548add2 101544 libnginx-mod-http-perl_1.26.3-3+deb13u4_ppc64el.deb 5e6065aadb4dd43dc0c09ce581208f94fd78884592f3689003c6d6d0486b9fcc 55008 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 684604d0aa8ca676bd6467739f2dd9ce4926f1baf2d02a3061e192b356ff08e1 91832 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_ppc64el.deb 0b73398303b8ed436c9cea3f197b6f031a042f5df1ef2bbf541e9362089cef69 108324 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_ppc64el.deb fb07ac36e19a5a401bcc6b399bd5ab9105738f51fbd6596d786aa7f7a358f7c3 126064 libnginx-mod-mail_1.26.3-3+deb13u4_ppc64el.deb 3562eaf3dcf5367f9b577cc642852c522de504e454b0a573206e710adf746247 192896 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 23b7e53fa33054de40c28b69c7317c8b69ab38ef2e9b1fce6c1f7ad7d738f695 24304 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 407d7eb4c7681a427bc80902a426aeab6f1eb1ca7ae718ddb9650a44e6ec98bf 88400 libnginx-mod-stream-geoip_1.26.3-3+deb13u4_ppc64el.deb 0cfead102919ece252419dfd6ec5d1202015f1c5106ff6b14d5489efdc3af06d 162268 libnginx-mod-stream_1.26.3-3+deb13u4_ppc64el.deb d933023b13fe91b3f736afb040a7d52eb78e1d3c0645d1dd45271cfd2f957b84 1387616 nginx-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 5cc874f25470b4194029d04b8e6135b714ccb7d21778284e6c5f512894826e9c 83976 nginx-extras_1.26.3-3+deb13u4_ppc64el.deb db78b9fe5c66e227ebd979836333871c9b7ffaff0d62fbd82af2df0c07b78976 14014 nginx_1.26.3-3+deb13u4_ppc64el-buildd.buildinfo 39cdbe7d1e28d51a3f5d7a4bfdb653a20a94fc7c1c13ed2c782110e4af19b349 653216 nginx_1.26.3-3+deb13u4_ppc64el.deb Files: 8300117eef617762403cb831949ce8ce 38460 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 3c165a857ea03a77924b96bb3fb8cc25 89232 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u4_ppc64el.deb 844e6bc9b57ccf1584a0fdb1dd2b54a7 46672 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u4_ppc64el.deb c488bcdccd43138dd6101f53c895d76c 93108 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u4_ppc64el.deb 5adbed753081ee8c91a822f9fb3cfc54 109820 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 01589f420ec7d058c1cdf94fff630340 101544 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u4_ppc64el.deb dc6e1e6190a4dd08796954925461601f 55008 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u4_ppc64el.deb fefd360075ff15a300ba12a2093c7549 91832 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u4_ppc64el.deb db1a9cfa60837e4fa5206addd0153ecf 108324 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 5c3fd3dadc9d1869ebd15441e5afa385 126064 httpd optional libnginx-mod-mail_1.26.3-3+deb13u4_ppc64el.deb 8ef39073d33a6babc5422b005ebe7185 192896 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 0c8d9798a759e391698b45d8bbedee3f 24304 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u4_ppc64el.deb 7bbfbfaf8ceccc5e3a4d7653ed9a9a0f 88400 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u4_ppc64el.deb e1aba671b1899fddfe93c61058297296 162268 httpd optional libnginx-mod-stream_1.26.3-3+deb13u4_ppc64el.deb 8698ca8e8ebdec71d1726822ccafdd32 1387616 debug optional nginx-dbgsym_1.26.3-3+deb13u4_ppc64el.deb bc909f143550def47d7ba631c425aaf0 83976 httpd optional nginx-extras_1.26.3-3+deb13u4_ppc64el.deb b862ab7dd6a0cbba8176807e558fb944 14014 httpd optional nginx_1.26.3-3+deb13u4_ppc64el-buildd.buildinfo f89e446d90c222367908b1e53159deb5 653216 httpd optional nginx_1.26.3-3+deb13u4_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmn5FwsACgkQ2FRWNm40 e2aV6RAAwJAPA5g1xOSz2zRyj7I30E8vskNHq3dbOQkLlfDE/3JeyPBEhwgdsNnV Z24IttF0jJhraSbBvGb+3bORKTEfIgnq+s7F71nur0+4C0sIe1J6U9F2sy068v9r t598/jCN+lkQX/ZF9CEON3hAENkh43SYjDtvh3z0kAHqk0qDjF8OwTfLJEN7b0Sf /gO0o4rKRtSdE5NJaAnyyLZhWFwemCCZ2RLHZs+4SVUEjCsr4ZeFSJuH/9Dn5/4r hmnatKVlqg+sKaH4T7Zb4Nvlsso36KdREb+yco7x/qjcez7pp1ymDVTzrGGFLIzn WY62CtWurD1vnDJE4wOygu0vjppzvTOBX6JWA3VRJXnMgr1JqCmTL9NE6s0VMDuS GG5iantLz70znAQZ5u+irv1KDdWVc9vRTuPEkgwtAas23qKY76LAH3k6ea78/9+r pTCm2AQ1EIko83Qi2kKF6hQoWX/VxxioIK0BatdXuA14wqoIO2bHsq6+C3wU8sAg bti4QDFb4xRWFNzKcO2Bo+4KAMtIqhu0k+iASeDuPyTzaeFR80ZKGqTrEw7UvlUX SiPD9UxfF2rF0Ddk9tttjsp0Ffp38+KCmIPkftFFimY9tlUHL7q1ykrlJqEISFFv wZnf0BW241yJH4Pg3kRAR0GlHDIvfSMR0Jz0IsyNNE6V/JA6pSA= =iEIP -----END PGP SIGNATURE-----