-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 13 May 2026 17:24:37 -0400
Source: nginx
Built-For-Profiles: noudeb
Architecture: source
Version: 1.30.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net>
Changed-By: Thomas Ward <teward@ubuntu.com>
Changes:
nginx (1.30.0-3) unstable; urgency=medium
.
* SECURITY UPDATE: buffer overrun in ngx_http_rewrite_module
- d/patches/cve-2026-42945.patch: Apply upstream commit/fix for CVE
- CVE-2026-42945
Checksums-Sha1:
c21ae6956bbd0c5d6df6dd2d497c4004a6ffe458 3764 nginx_1.30.0-3.dsc
57c5f410c29b1565d027fdafdbe55897364ba5b3 1324188 nginx_1.30.0.orig.tar.gz
078f538f8611ed2e956249fe2c2860763d7ebe1a 862 nginx_1.30.0.orig.tar.gz.asc
9913a6c8f1fc7e10a0783bad510295668716a59a 74868 nginx_1.30.0-3.debian.tar.xz
ca0dae3341f077f7757a4461364f1eb314cebaa4 7416 nginx_1.30.0-3_source.buildinfo
Checksums-Sha256:
02774dff562d5aba5e6b3a66dbd0d178366e52b851351222a9dfe748d9120a1c 3764 nginx_1.30.0-3.dsc
058188c64bf22baecaa72b809a6318a4f9ba623889c554feab03f7cb853ab31b 1324188 nginx_1.30.0.orig.tar.gz
f7f509d3c03b8e0cef6665335c128004a20f780645a3d536ebc8419e96782d51 862 nginx_1.30.0.orig.tar.gz.asc
93026ef3fd17a7fda0a7eb4cf32fa3060ae2c4e9dec01a6ecd7ce658249475ed 74868 nginx_1.30.0-3.debian.tar.xz
826adf0b9bd76a59714777f0cfbd3a30c625e8d2c6e6ad3ead84ada1f210623c 7416 nginx_1.30.0-3_source.buildinfo
Files:
78b6e68af34e2a8d639408759a2b94a5 3764 httpd - nginx_1.30.0-3.dsc
ec242797e2368affe346a79e96ab58f8 1324188 httpd - nginx_1.30.0.orig.tar.gz
0b23d2a5d64a75095a9737feba5d93cf 862 httpd - nginx_1.30.0.orig.tar.gz.asc
4c6c0dbc9439f2892543d2addde64c61 74868 httpd - nginx_1.30.0-3.debian.tar.xz
f0f6b5097399ef995eaddf9c55f2be04 7416 httpd - nginx_1.30.0-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=FR8t
-----END PGP SIGNATURE-----
