-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 May 2026 06:23:38 +0000 Source: nginx Architecture: source Version: 1.30.1-3 Distribution: unstable Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net> Changed-By: Jan Mojžíš <janmojzis@debian.org> Closes: 1137339 Changes: nginx (1.30.1-3) unstable; urgency=medium . * backport fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256) from upstream 1.30.2 nginx. * d/p/CVE-2026-9256.patch add (Closes: 1137339) Checksums-Sha1: 1b7d1fe5dfc33b65fb1e09bea76ab9acfe067bfe 3803 nginx_1.30.1-3.dsc bbaaf21796643b8bc4c6c09cf1033bdc8272af43 75668 nginx_1.30.1-3.debian.tar.xz 04c904cb626ea2d87f3333c1ae936dc680fbd7a4 2365196 nginx_1.30.1-3.git.tar.xz b84361bca698c3d90528eb74450b0ee24ba61a33 17418 nginx_1.30.1-3_source.buildinfo Checksums-Sha256: a9f302b3d5ae79ef0b792e7e52e1ed9e75dfd73a5f4b3d371ff8095bace7c9e2 3803 nginx_1.30.1-3.dsc 7d5486118924e51c519caf866a93df87ea935b95f4e00abec82ed61eb569945e 75668 nginx_1.30.1-3.debian.tar.xz e0a7d8588c1b6f3c9f000134a87614c4ea7c331912a0ae37bfb1bfb636068fcb 2365196 nginx_1.30.1-3.git.tar.xz 87926e29d4dba1a7d325acf80ba92b8efbee1dab806decb2af080520a43204a5 17418 nginx_1.30.1-3_source.buildinfo Files: 1930cb6c07bf11ff32aa1f9d54596dc3 3803 httpd optional nginx_1.30.1-3.dsc 8d1114bc4ce3ea879d45cbda4c485f97 75668 httpd optional nginx_1.30.1-3.debian.tar.xz 06ceee00079e5fca845a1a4d6ffdbc7c 2365196 httpd None nginx_1.30.1-3.git.tar.xz 196d6a784f633e22ee294d35aa7099b4 17418 httpd optional nginx_1.30.1-3_source.buildinfo Git-Tag-Info: tag=89c8f82e5343bc7437103287712cdd9aa430b696 fp=d008b0c23d8479e46b9fcb9045da517496939ff9 Git-Tag-Tagger: Jan Mojžíš <jan.mojzis@gmail.com> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmoRTXoACgkQYG0ITkaD wHnozg/+KJbD0yzWQeGAXqOkIABTNF9ER8nru4cwTj+ubKOBugYomIuL9bJ599Bu gqxU0S6UmuKAJJoagnwwRiq7JSKekqG3jlTiRX793WVeDx6Js+CFi7TII04i6NNt tzcc9yzyXaVjb0dimOTe/n2FzD6CYbzrfN7HFZZezZpGcSgUm1Zb6zUImWS2IBOm /Pv4uhxfTfcJTkOh6/EZuL258ddHnV5XCN6/rvpiu22KNYKzwdIFjiyX+NT7vV/Y MNvRzW6My+D2/8SMBacUdKC/WI2RnL0sdDUZrDNQfGTK+tCw2ynq708zDTru5Z6u EowVBUeewgZpQvox0FjQOeKm7R92qIcITpodVevZsVIiJahFKeWxeFKdawfnPX/y TSA61gR4izne4ARQzUAdmRihKcD+nkAXRO1ADGlNT8EjAAfFPPw6hsn9zNhuXQJz Iquz4cpTUoBvzTkuvVwoHyKhsfLTNQIulIO+0SiAVjGD64hkNlUgTswTKsC8ipOB UxzhdmfHqeZlIhdag6kXlH2/QLZoHVu6BoiT5BLKxkDwPPaUMp1cq4q9mAhHsIp0 ri5JaUyDA+YonMDIKUN8sEXQQznl8jVu25zvld/eSp7wqyimZShmBWHmlKNjXv0t EiA9xpdY7/pWLjutzDceM9vJGca2vuavxvTs47kdZRrg7VrI29Y= =WzQv -----END PGP SIGNATURE-----