-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Feb 2026 08:11:19 +0100 Source: nginx Binary: libnginx-mod-http-geoip libnginx-mod-http-geoip-dbgsym libnginx-mod-http-image-filter libnginx-mod-http-image-filter-dbgsym libnginx-mod-http-perl libnginx-mod-http-perl-dbgsym libnginx-mod-http-xslt-filter libnginx-mod-http-xslt-filter-dbgsym libnginx-mod-mail libnginx-mod-mail-dbgsym libnginx-mod-stream libnginx-mod-stream-dbgsym libnginx-mod-stream-geoip libnginx-mod-stream-geoip-dbgsym nginx nginx-common nginx-core nginx-dbgsym nginx-dev nginx-doc nginx-extras nginx-full nginx-light Architecture: source amd64 all Version: 1.22.1-9+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net> Changed-By: Jan Mojžíš <janmojzis@debian.org> Description: libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-stream - Stream module for Nginx libnginx-mod-stream-geoip - GeoIP Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-core - nginx web/proxy server (standard version) nginx-dev - nginx web/proxy server - development headers nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-full - nginx web/proxy server (standard version with 3rd parties) nginx-light - nginx web/proxy server (basic version) Changes: nginx (1.22.1-9+deb12u4) bookworm-security; urgency=medium . * d/p/CVE-2026-1642: backport upstream patch for CVE-2026-1642. Fixes problem when an attacker with a man-in-the-middle position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server. Checksums-Sha1: 26738b96951174ef390984f244f49e07a7e06c53 3827 nginx_1.22.1-9+deb12u4.dsc 45a89797f7c789287c7f663811efbbd19e84f154 1073948 nginx_1.22.1.orig.tar.gz ba23b11e0b8f27e8aadc86f565fee7be025cad66 683 nginx_1.22.1.orig.tar.gz.asc c9ca565e397d48ca6636055eaab314f2940917f3 75080 nginx_1.22.1-9+deb12u4.debian.tar.xz b41e36d15474340853b3a92a8afec66f393cde49 36768 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u4_amd64.deb 628abbdf79ac89a1b8febcd603d69b6f93468d68 84792 libnginx-mod-http-geoip_1.22.1-9+deb12u4_amd64.deb efbae1320f0df48422526fea396087008ea9cca9 44056 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u4_amd64.deb 6f64dd21578b8f07166d31ebffb75b2cc0d689b5 88480 libnginx-mod-http-image-filter_1.22.1-9+deb12u4_amd64.deb cc15a3e6c1c1b6e62db659ee3970318978f2f8e3 99672 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u4_amd64.deb a18e4a7a09b7db584bbfdffe4b31e19fc32f1258 96584 libnginx-mod-http-perl_1.22.1-9+deb12u4_amd64.deb 4389ac5fec5692df6f94511bdeb4e06bbc5af37f 53280 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u4_amd64.deb a802b7ff858a7cd52dea03711df878084656aee6 86964 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u4_amd64.deb 5d00580323cbc691e93f25ee8a3fe036e9bd0fd3 104644 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u4_amd64.deb a916f09c41725537577b03362f5afb7b8606dfe1 118924 libnginx-mod-mail_1.22.1-9+deb12u4_amd64.deb fb1dba0fb42461edea226a750ec1cc77434f0692 171700 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u4_amd64.deb 9ced494364ed8f4e72201c93d6e0f17c4afe4212 22476 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u4_amd64.deb 401fc5bc369167ae8717d908793fd1836951d379 84028 libnginx-mod-stream-geoip_1.22.1-9+deb12u4_amd64.deb 627479ea2d8caedc1d0ab91aa7bd5b1a6068b79b 144120 libnginx-mod-stream_1.22.1-9+deb12u4_amd64.deb 50cea075b3ef3d76def6874ef94451ca2fef287e 112584 nginx-common_1.22.1-9+deb12u4_all.deb 38749a41070aa6394741e8e7b9c193418ac20899 80060 nginx-core_1.22.1-9+deb12u4_all.deb 812727458f0350de89ae171ada4373a44a7f5e1f 1118016 nginx-dbgsym_1.22.1-9+deb12u4_amd64.deb 0d6e5b6a1764a000c17477b5e9524677289dde2c 176572 nginx-dev_1.22.1-9+deb12u4_all.deb aa4c74c81aa67838a619cf55a364e414147ad004 88104 nginx-doc_1.22.1-9+deb12u4_all.deb cffd25f4acb5e1ed64fa7fb2c10821e7bd1a355d 80304 nginx-extras_1.22.1-9+deb12u4_amd64.deb f57096c1ef4909c210bdfaaac1ffbff49dbf5d76 80136 nginx-full_1.22.1-9+deb12u4_all.deb 477de12122bbb493e6bd937fe93407ffdd238466 79840 nginx-light_1.22.1-9+deb12u4_all.deb ccf71122e47827370f93bf6e319fa801d07419a1 16332 nginx_1.22.1-9+deb12u4_amd64.buildinfo 89cf105db3b8e05de6ff6c6012890235b4e6f643 528256 nginx_1.22.1-9+deb12u4_amd64.deb Checksums-Sha256: bbd4713075bc86109fb56ede9b8e9fb1019d425bbf0e43f4e0fa3c45ddff43d0 3827 nginx_1.22.1-9+deb12u4.dsc 9ebb333a9e82b952acd3e2b4aeb1d4ff6406f72491bab6cd9fe69f0dea737f31 1073948 nginx_1.22.1.orig.tar.gz e3c34c995f8d2748a323cf3ad5d7fbc6ddcc57f0f4b5fc6e494894cadf6075fc 683 nginx_1.22.1.orig.tar.gz.asc afb5d7b06cceece7b00dc281e776f296c36cd4bad617e89087a07d58bce1799c 75080 nginx_1.22.1-9+deb12u4.debian.tar.xz b0a731744e2602247a30beae0221cec391b180323d7538f11912f6ca6a638a68 36768 libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u4_amd64.deb cc7720216a19fe3edaa3c00a7cddb7e5012fcbc1639d51dc300e82410db105b8 84792 libnginx-mod-http-geoip_1.22.1-9+deb12u4_amd64.deb fee80b1a91c802fcc5087b688fa13a9e67456dda5e068f12a9732fa20b7d0ed4 44056 libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u4_amd64.deb ffa72314d1a47967ac2a8514cd88e883d90e4ada1fb7b690c3dd39d2850197a7 88480 libnginx-mod-http-image-filter_1.22.1-9+deb12u4_amd64.deb 7dee2b281279f249e062a53fb7831c204ca4f8b43b80f9236b3623ffce139733 99672 libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u4_amd64.deb c1fef15888d361d0152338f59f4d5013d42d0140f0ac24a3591b4c48a0ece021 96584 libnginx-mod-http-perl_1.22.1-9+deb12u4_amd64.deb d7dde1aaa27ccf2782f795ab2ab73f3e778482d2106d615ee12c99557db15890 53280 libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u4_amd64.deb 6557df9885596f423612a42444e6cd944f10f3d295d8e4b7aea4178138f2149c 86964 libnginx-mod-http-xslt-filter_1.22.1-9+deb12u4_amd64.deb f7d88b855cbb3def769f2dcd9839109af5154c6378ed02a6308f147293850bec 104644 libnginx-mod-mail-dbgsym_1.22.1-9+deb12u4_amd64.deb ac8391a83d948605555d06978c47b05b408bd3434de3ada70ff33c9ad7648fd5 118924 libnginx-mod-mail_1.22.1-9+deb12u4_amd64.deb 976801d3e299f345d05ae9d0ed3f0fa60d83ccdf9993ce09460b41888a2fc12a 171700 libnginx-mod-stream-dbgsym_1.22.1-9+deb12u4_amd64.deb 7b5d22803ba85dcf5f9d06e152249a151c089e8e6a9ca8fbf218167b30b308ec 22476 libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u4_amd64.deb a257cdbfba06279ac180251a43e539d6e286b445eb69b43f72399c82c0db1356 84028 libnginx-mod-stream-geoip_1.22.1-9+deb12u4_amd64.deb 4974bcd3645a6a0e20b0fb65db24455612281ab0869fea0f0c2332a89ec26dc9 144120 libnginx-mod-stream_1.22.1-9+deb12u4_amd64.deb 5df8c95d9d9707a8f94400e9782f60172aeb819d330af82846fc6ed9994dc289 112584 nginx-common_1.22.1-9+deb12u4_all.deb 75ff7825cd4ff9462f4b9dca35fd6926506adbaca1d1282fca4b10a33ff078bb 80060 nginx-core_1.22.1-9+deb12u4_all.deb 936bffadaa37058f756ccac049a6651ca1c974b8fbde557402e47752be0bf729 1118016 nginx-dbgsym_1.22.1-9+deb12u4_amd64.deb 3a4fddc491e9f2117c6db7a6a86b9ab55eb8f4c45974ce5de4ec486b12e0eb13 176572 nginx-dev_1.22.1-9+deb12u4_all.deb ca9479202d56a805d9ea8d72490307fd9f86a596173e4477a92f501278ec1ace 88104 nginx-doc_1.22.1-9+deb12u4_all.deb 9e37a0fa217b00965a0ad96155d3e9f796a990744647c55800716b1f246ec964 80304 nginx-extras_1.22.1-9+deb12u4_amd64.deb b5156e46e69a73655f68a57653567cfda1fbd2ddfcb43dcb758c88b694e06f61 80136 nginx-full_1.22.1-9+deb12u4_all.deb dea481384ad10fe8d896b9bb11e55054ed2c275e0c4bba1029cc8838cf798d3b 79840 nginx-light_1.22.1-9+deb12u4_all.deb edd46aeeb1c8dd3d08ed72781748d2e88ee86a35a3a92989a36a324fbf541dcf 16332 nginx_1.22.1-9+deb12u4_amd64.buildinfo c5aa019e3257d39501fa39b91383585d76c75c30af75be95070ee75191afdbed 528256 nginx_1.22.1-9+deb12u4_amd64.deb Files: c50a7fecc9b85a1165c1a4d37d97fdb8 3827 httpd optional nginx_1.22.1-9+deb12u4.dsc 8296d957561aeed0261d9be4d3decaec 1073948 httpd optional nginx_1.22.1.orig.tar.gz aaf853b5467d007c528067ee7393fff3 683 httpd optional nginx_1.22.1.orig.tar.gz.asc fb41546d1ee74fcc390766d3df2bff26 75080 httpd optional nginx_1.22.1-9+deb12u4.debian.tar.xz cf50f4a86b7ff3faba8ef8ca6d087387 36768 debug optional libnginx-mod-http-geoip-dbgsym_1.22.1-9+deb12u4_amd64.deb f8ad4ff23ba8cdf0d10ab52a22ad1f27 84792 httpd optional libnginx-mod-http-geoip_1.22.1-9+deb12u4_amd64.deb 0328450ac1408e0afdfe86a538936023 44056 debug optional libnginx-mod-http-image-filter-dbgsym_1.22.1-9+deb12u4_amd64.deb eaa74be1a6e98fb50c94e08e93b6d5eb 88480 httpd optional libnginx-mod-http-image-filter_1.22.1-9+deb12u4_amd64.deb 1739b05a08b6cb56f34a58991cd54ee9 99672 debug optional libnginx-mod-http-perl-dbgsym_1.22.1-9+deb12u4_amd64.deb 6f95065ef29b49866f8d76276b924cbf 96584 httpd optional libnginx-mod-http-perl_1.22.1-9+deb12u4_amd64.deb c1347132c16a41e97c3ba04c80c05913 53280 debug optional libnginx-mod-http-xslt-filter-dbgsym_1.22.1-9+deb12u4_amd64.deb 15c3682464964a7ae2c4859580423597 86964 httpd optional libnginx-mod-http-xslt-filter_1.22.1-9+deb12u4_amd64.deb 0ebe0a388173041416d16b72ff7ef7ad 104644 debug optional libnginx-mod-mail-dbgsym_1.22.1-9+deb12u4_amd64.deb 6c54a972fb77ba1b541761e0067df648 118924 httpd optional libnginx-mod-mail_1.22.1-9+deb12u4_amd64.deb a1cde9b3eaac5074f1aa6f5bb1a48481 171700 debug optional libnginx-mod-stream-dbgsym_1.22.1-9+deb12u4_amd64.deb cc1154d227f36b7e47c122ed9c2bd6d7 22476 debug optional libnginx-mod-stream-geoip-dbgsym_1.22.1-9+deb12u4_amd64.deb 310f4b4a4f14e490549c6d14e02d7fe8 84028 httpd optional libnginx-mod-stream-geoip_1.22.1-9+deb12u4_amd64.deb 13581d3b541b777e296bc30b2873905c 144120 httpd optional libnginx-mod-stream_1.22.1-9+deb12u4_amd64.deb be43fee016097c502be894c1bcbfe624 112584 httpd optional nginx-common_1.22.1-9+deb12u4_all.deb fdbdf60e651e323180d646bdd80a0f5b 80060 httpd optional nginx-core_1.22.1-9+deb12u4_all.deb a9e5d83dd2ee2d3518d7472d76c94e27 1118016 debug optional nginx-dbgsym_1.22.1-9+deb12u4_amd64.deb 7b82feb92baf637b0f4b63cd94183fca 176572 httpd optional nginx-dev_1.22.1-9+deb12u4_all.deb 42882e7a75deaf538a3a7f9033a08cd4 88104 doc optional nginx-doc_1.22.1-9+deb12u4_all.deb 06121652fc7dd25d2635900a2f2f6ffb 80304 httpd optional nginx-extras_1.22.1-9+deb12u4_amd64.deb 150b9e517f817740b1615d9eca9a8c62 80136 httpd optional nginx-full_1.22.1-9+deb12u4_all.deb f8a24c55c79fb0d8d1ae9e78e9f49bfd 79840 httpd optional nginx-light_1.22.1-9+deb12u4_all.deb f48db4b93b5583fe9c5fdab06327e63e 16332 httpd optional nginx_1.22.1-9+deb12u4_amd64.buildinfo 118c291468d8758795a8236cdb2d3bcd 528256 httpd optional nginx_1.22.1-9+deb12u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEE0Aiwwj2EeeRrn8uQRdpRdJaTn/kFAmmMGG8VHGphbm1vanpp c0BkZWJpYW4ub3JnAAoJEEXaUXSWk5/5yXEQAJ9PRaVBopfvIHi9Z54Ip1HjyxsG IM3TqceBnjmi8nwqyrwd9R1bN3oFg5ferovsE0c032EOw19fnw7VIK9bixWNmR8U 5kF/KvzjHpfYRw5JcSkdQhUHInpDfNstVit9I4H4f4ludcXkpc7TNs8DZT9xDduI tkKMx00/h80+WbKYu40exjwrix35i0mogHepuVR07hkz53q0HO82sq2pdHILy4JB w63VIbqzPkdwE9sSPCm2ifP5bYaeRqHwpqJ0eVXMUDT0CPJUjP06aqEHbEbRKOn5 HwbGdJOcUL6lBMMXaZAQSHqrIH8p2HDPv/IKLHv2KeqSBaxi1mLHKEnu4JLUK3vv OFEl+X4G7Tw92K+VjvwMIZlx+7JSzKhUdaADSJrdOLnUi2Xg9l0gCJ3/6FspfdIi lMuYfttI3nBNvHTBZk/fIYdP3QBF4hlyZL5xW97PD6qQt5MYtqlZaNOvrU2t0vGP Cr6AbaDizzvfU7QPAvtMJjH4N96Rhyw3DKdNolaoL4dRbwKbAKNj8tyo4WU1bJxk mo3DPJZUYN39rvfzm+aCCOrj49Pn56EkAQ8PmoyY9n2AYef0yOG4YN+V+AQ68AsS 9dvsPMJDYEmb/ZcjhMrRyxYOVzWLuW5ZK0IZsUgtth82hAGoYo3MlWHTXgivGBQe aQOUDY7os7BW/JKd =4kjp -----END PGP SIGNATURE-----
