-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Feb 2026 07:47:34 +0100 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-common nginx-core nginx-dbgsym nginx-dev nginx-doc nginx-extras nginx-full nginx-light Architecture: source amd64 all Version: 1.26.3-3+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net> Changed-By: Jan Mojžíš <janmojzis@debian.org> Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-core - nginx web/proxy server (standard version) nginx-dev - nginx web/proxy server - development headers nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-full - nginx web/proxy server (standard version with 3rd parties) nginx-light - nginx web/proxy server (basic version) Changes: nginx (1.26.3-3+deb13u2) trixie-security; urgency=medium . * d/p/CVE-2026-1642: backport upstream patch for CVE-2026-1642. Fixes problem when an attacker with a man-in-the-middle position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server. Checksums-Sha1: 12da25370c93880ad9de2174556815369bd96002 3827 nginx_1.26.3-3+deb13u2.dsc 4207a2844e6542292465427e25b76e24d01a85b6 1260179 nginx_1.26.3.orig.tar.gz 21a3be6ada92a51e25f45ee7545a81c2037d73bf 862 nginx_1.26.3.orig.tar.gz.asc 7042c850961c044516b87f7c08260e63c858420a 81176 nginx_1.26.3-3+deb13u2.debian.tar.xz f1bfd1586636d4090794807470e01eee70abe2c7 38092 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u2_amd64.deb 086a3f608814642c43cb6094ea7286ce26aa0429 88008 libnginx-mod-http-geoip_1.26.3-3+deb13u2_amd64.deb 6511d640facabd6ff2573e1bd57ee2afd0a8c739 46392 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u2_amd64.deb ecbce62690e54bf9bf576c2ae4294889b475f0be 91760 libnginx-mod-http-image-filter_1.26.3-3+deb13u2_amd64.deb 698965477b1e202014638819761d9185a99c7452 109640 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u2_amd64.deb fd483f11fb977f78a3456426cb33fccf225c0e50 100180 libnginx-mod-http-perl_1.26.3-3+deb13u2_amd64.deb fc2fa04da9a99beaea9ce93f25666c6adaabe2da 54424 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u2_amd64.deb 29d9bf65d760ba0d61cbd23b1528433ad2a03585 90272 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u2_amd64.deb 36a0fbea0de29acbe7e7cca26c4f6c41d732822e 104808 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u2_amd64.deb 4d14204768dab56423f1c1a028ee4a2f017458b5 122152 libnginx-mod-mail_1.26.3-3+deb13u2_amd64.deb f68c9008620916904ccbe72363d5420abd444584 185644 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u2_amd64.deb 6f92de500618d52998fec87f731780dae2b05806 24000 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u2_amd64.deb 52f91c2a33f1d6fe1c82e82770c5a142e77d30e9 87196 libnginx-mod-stream-geoip_1.26.3-3+deb13u2_amd64.deb ceab1b1fc781f0c3782caa53ac676c3732d09593 152016 libnginx-mod-stream_1.26.3-3+deb13u2_amd64.deb 3caf541369aa88f7f02e42a588b670d53722eef4 108888 nginx-common_1.26.3-3+deb13u2_all.deb 1c6111059c25a002d8b78bafe09c4ae8a813a526 83304 nginx-core_1.26.3-3+deb13u2_all.deb b4ff478684f9134074756fd9f359b1c0eefdbb98 1342420 nginx-dbgsym_1.26.3-3+deb13u2_amd64.deb e3a4a2bbe55fdbc1729060d003561fbc53a3fde5 196120 nginx-dev_1.26.3-3+deb13u2_all.deb a29715679da3a4b9e0d1d5b57f58f3360fe476ec 91392 nginx-doc_1.26.3-3+deb13u2_all.deb dd5ee1dac9e4b9bcb6f4e56ba80d5fa0cf099d9f 83460 nginx-extras_1.26.3-3+deb13u2_amd64.deb 238c3832132092b3c5f4929f13fc7eb9e1f587b3 83316 nginx-full_1.26.3-3+deb13u2_all.deb 9f6b5c44f0861188538c539f364161bae8d61bbb 83064 nginx-light_1.26.3-3+deb13u2_all.deb 9a290bc86f431a6d111d585ebb4beaee375709cb 15796 nginx_1.26.3-3+deb13u2_amd64.buildinfo d1348379dd4b1354bce7b088adcfd72994637de4 609272 nginx_1.26.3-3+deb13u2_amd64.deb Checksums-Sha256: e37ac2c0636118e33452e7774ca16c319fbf2165ef2709defc4447f44211a547 3827 nginx_1.26.3-3+deb13u2.dsc 69ee2b237744036e61d24b836668aad3040dda461fe6f570f1787eab570c75aa 1260179 nginx_1.26.3.orig.tar.gz faa36c1c57af475445b2a50d203fea314ed1db6a3399ed95c79ae7e99478a9f3 862 nginx_1.26.3.orig.tar.gz.asc fb55398fd99a07979d850a07708fc9f80d4952ac9fb0031dec18123ebbef9cd7 81176 nginx_1.26.3-3+deb13u2.debian.tar.xz 09c6b6244bd6f26d94862903f1d06e198121de62b6bd8e777a5c7d198451a094 38092 libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u2_amd64.deb a5e9edc916c19b9aed1e9fb3f6929ddb194b7900cb9366fbb58d0bf6dc9c23ae 88008 libnginx-mod-http-geoip_1.26.3-3+deb13u2_amd64.deb 7ffcb04cf46276aaf9bdfd6dbc780aa2c7dec8b01cec6eccbc37c5f83dc7f30f 46392 libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u2_amd64.deb a8c9b5f372017d92bf10d0cf3ca25d8a03d7a499c03309ae67dc45ece35d0d1b 91760 libnginx-mod-http-image-filter_1.26.3-3+deb13u2_amd64.deb 5ad7be39788354f12545f54014cc82e12b7d8e01a5aff00452f1bc0e932c5b0a 109640 libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u2_amd64.deb 0a33c98ec570d460ca26c6fa858470b818c43d8b932ef30ac55ab35846a88fe4 100180 libnginx-mod-http-perl_1.26.3-3+deb13u2_amd64.deb 2e3760e9731d16a481686c83feee71ab1c2c3cef9e6d66b6fce1d901888fe700 54424 libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u2_amd64.deb c0c169a34c034df2e78df4c2fb05ab8e7df3c40c6140d22ea9f1af465bcd6674 90272 libnginx-mod-http-xslt-filter_1.26.3-3+deb13u2_amd64.deb 8ba5200f4f0c4b796f618d42321a5559a22343d8a01a17fd989ae337ec6ac152 104808 libnginx-mod-mail-dbgsym_1.26.3-3+deb13u2_amd64.deb 0e2062deaf40bc9af607768871137f62404fecb4c3de2cb565ccc0c8ae27a1f2 122152 libnginx-mod-mail_1.26.3-3+deb13u2_amd64.deb 0830049816b374971b7452e33f17efbb6f1707360bb4420cf37a1affad9c3cda 185644 libnginx-mod-stream-dbgsym_1.26.3-3+deb13u2_amd64.deb 4cbbf57c7eb59d2a5147147c29b85eec45b59132bd86dae0cebf629d66830701 24000 libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u2_amd64.deb 3edb6ef41a96dbc8864df3f87dba9e9d4afdae777b57bb093ad5da7e22184b1d 87196 libnginx-mod-stream-geoip_1.26.3-3+deb13u2_amd64.deb 2cfc0d19fe00de59f1823218163be9b0a1466e3d583597cbd6fbb1eeb858325f 152016 libnginx-mod-stream_1.26.3-3+deb13u2_amd64.deb db5b083ba63d4ded8dab98d9c0cb95b02b1d5540bf6e35290615efd55858e65d 108888 nginx-common_1.26.3-3+deb13u2_all.deb f317615eef19e56e893a27ac31aa8377399e454be9ef8f9b43c76ba5bd7725f0 83304 nginx-core_1.26.3-3+deb13u2_all.deb d8af09b7ff72267340ebe58b5bb6c5f9ec3c5bdc8f398e854b249b3b3aa3490f 1342420 nginx-dbgsym_1.26.3-3+deb13u2_amd64.deb 0c949430016ed547253bc1c2ec19b156046b2e060343cbaa2698a7ecf86972e5 196120 nginx-dev_1.26.3-3+deb13u2_all.deb 30836f53c1c939b30fddf3ae8f5783ba7dfb3d092554854186fd79494f05948e 91392 nginx-doc_1.26.3-3+deb13u2_all.deb 3d64c37f773182d42ff6ddf20d4ddb8cd45a56ef473c090afac247ad0db7c8d0 83460 nginx-extras_1.26.3-3+deb13u2_amd64.deb bdfe8057a92dcc687ce1e6efb6976cf6ea91afcc66c23890f37993b9548259ac 83316 nginx-full_1.26.3-3+deb13u2_all.deb b41815cd614c995ccadaaf027cca8994a31e422843221bb3ef96f53b2ab7ed8c 83064 nginx-light_1.26.3-3+deb13u2_all.deb 4b459451b73c6a3792e996ad92e212d961eaa421a5e1bcbaf562c8bebb29b464 15796 nginx_1.26.3-3+deb13u2_amd64.buildinfo 98bb3ea66b28b8c8269a3acd4358a718349d79bb122adaabf45752954b7910d6 609272 nginx_1.26.3-3+deb13u2_amd64.deb Files: ecf9f9777f24eec76c03a0dbc253d543 3827 httpd optional nginx_1.26.3-3+deb13u2.dsc 75f8fdd88469c4d31e0715e186b2f1f9 1260179 httpd optional nginx_1.26.3.orig.tar.gz ec6865f8fe1813fd23ac9ddd5df0d1e6 862 httpd optional nginx_1.26.3.orig.tar.gz.asc 96aa74d090745e5917c786bfdec4357e 81176 httpd optional nginx_1.26.3-3+deb13u2.debian.tar.xz b95c445e4e3d7738681c501bccd470f1 38092 debug optional libnginx-mod-http-geoip-dbgsym_1.26.3-3+deb13u2_amd64.deb 70864e173d92105219e010517cfc3ee1 88008 httpd optional libnginx-mod-http-geoip_1.26.3-3+deb13u2_amd64.deb 5d91cd26767c1f52b156605d1e5c3958 46392 debug optional libnginx-mod-http-image-filter-dbgsym_1.26.3-3+deb13u2_amd64.deb f1a10dfe1e23fba29de591d37097dffe 91760 httpd optional libnginx-mod-http-image-filter_1.26.3-3+deb13u2_amd64.deb fdf90b003eeabf669c1c6894c7bd2788 109640 debug optional libnginx-mod-http-perl-dbgsym_1.26.3-3+deb13u2_amd64.deb a227caacfc3b33a97e51ed2e45e7786f 100180 httpd optional libnginx-mod-http-perl_1.26.3-3+deb13u2_amd64.deb d03ec221c611294b7622a19c3426e96c 54424 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.26.3-3+deb13u2_amd64.deb bf13beb9bbd1847701e6d2a288feabc6 90272 httpd optional libnginx-mod-http-xslt-filter_1.26.3-3+deb13u2_amd64.deb 1efb384c38f64f2b366b1e9adbc9456a 104808 debug optional libnginx-mod-mail-dbgsym_1.26.3-3+deb13u2_amd64.deb d01aebd315aaa0afa032faa6335ec966 122152 httpd optional libnginx-mod-mail_1.26.3-3+deb13u2_amd64.deb a88fce7c578bc7ac79ba64d6c1b61c79 185644 debug optional libnginx-mod-stream-dbgsym_1.26.3-3+deb13u2_amd64.deb 605141aa67a151f747a5b0b5c65c81b8 24000 debug optional libnginx-mod-stream-geoip-dbgsym_1.26.3-3+deb13u2_amd64.deb 763f35897c86e3931b35e108fc65ca2c 87196 httpd optional libnginx-mod-stream-geoip_1.26.3-3+deb13u2_amd64.deb 97a2cbbbc6c5b1bfca72210da28a30a3 152016 httpd optional libnginx-mod-stream_1.26.3-3+deb13u2_amd64.deb f5210645a141f24efda2715384bbe466 108888 httpd optional nginx-common_1.26.3-3+deb13u2_all.deb bdeef71bceddcfdd4528005f3d783a63 83304 httpd optional nginx-core_1.26.3-3+deb13u2_all.deb fc4e6b8ebdf29ba4e277c27a61ca0f55 1342420 debug optional nginx-dbgsym_1.26.3-3+deb13u2_amd64.deb 6d3838ef4f55a172c1d8b94efbea7ad5 196120 httpd optional nginx-dev_1.26.3-3+deb13u2_all.deb f93f057741b34f90749a09138b072056 91392 doc optional nginx-doc_1.26.3-3+deb13u2_all.deb 3ba7d43f4f181b035dc7626688e38af0 83460 httpd optional nginx-extras_1.26.3-3+deb13u2_amd64.deb 048b5043c2eaafae3c21fab01384e5b3 83316 httpd optional nginx-full_1.26.3-3+deb13u2_all.deb 21fd4a2794f5175edd3a5f9389525df0 83064 httpd optional nginx-light_1.26.3-3+deb13u2_all.deb d381d4dae240ba5458bcf42ace0a93bc 15796 httpd optional nginx_1.26.3-3+deb13u2_amd64.buildinfo 166edc5be6c78213e681b497b6239877 609272 httpd optional nginx_1.26.3-3+deb13u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEE0Aiwwj2EeeRrn8uQRdpRdJaTn/kFAmmMGJEVHGphbm1vanpp c0BkZWJpYW4ub3JnAAoJEEXaUXSWk5/5Q7EQALjR7cKONLv+tWpEwNZv43rZPHDx HMy2laZanA4a+cCyHg/ZwiBtrk78Vn9ioRimxP9/eSCC2lgOdAX01Z/At3YWRHqS 2WXf5ocu8AOqewqhBxG3QAva4ZAW+dwo3LxGHeRB+T14AqpD8B6cLqP16MSV+3Qj Txf5il4jT6TVj6mY9YHqlUgKWm+tIwa5QggitcOD+QkZD47wd0A1FTzMKGhKz7vE u+c0rY7taBQBCFANWxmsYUz2Ob50KUPw325Me7LtlDXTpqSU4rnz8e94onfX17xt lMYlqgYn9kb1Smy4Rh66C6DB4otCD+Wro7hvmOB8NO7K/UUC2jP0siRPwO1P7BOf XkAU1R74ZoizB5+H1auN9hRTDV18aVrzFvnfr5PGiaxe6/oZCpqbaVWSquDcZwIR eAq2/uAXG70pZKmZs2b4xHy2FRB+6Uw8M1tYsdH3I8KQoJGw/WH4TG6Ud2rbCqrQ dLSRyvJYgV1JcYD6vfrwesMq2LDyKkTs5P9Tr9hcjwXtWSFxcWrtLKbHH/R6S8cb wokf1ag3NLxmRjTNQS1LnsM1Rj4WPJviU66zi+AE4BAUUxFnDTstS3TSlrsL97YT Cfy2Oi64wO0xFpUjYnMiQ+SBi8u9gooznXKL04oc6je5El/JnIqFaND8f3Os/3kI wXXwiZxxpCGoZK/B =CQcL -----END PGP SIGNATURE-----
