-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Jun 2026 22:18:31 -0300 Source: nginx Architecture: source Version: 1.18.0-6.1+deb11u8 Distribution: bullseye-security Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net> Changed-By: Carlos Henrique Lima Melara <charlesmelara@riseup.net> Closes: 1138794 1140359 1140361 Changes: nginx (1.18.0-6.1+deb11u8) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * debian/gbp.conf: set debian-branch to debian/bullseye. * debian/patches: import upstream patches to fix vulnerabilities. - CVE-2026-42055.patch: backport from upstream; (Closes: #1140359) - CVE-2026-48142.patch: cherry-pick from upstream; (Closes: #1140361) - FIX-HTTP2bomb.patch: backport from upstream. (Closes: #1138794) Checksums-Sha1: 95ab326754add1c5d8ec4239ddb252511a07e08c 4826 nginx_1.18.0-6.1+deb11u8.dsc 47b2c5ccd12e2a7088b03d629ff6b9ab18215180 1039530 nginx_1.18.0.orig.tar.gz 57512088d69fb5c4ca97582410fb4cd9fabb1346 455 nginx_1.18.0.orig.tar.gz.asc 22c5cce82fdc038db10f1a849d7f4b3de5e37975 1057000 nginx_1.18.0-6.1+deb11u8.debian.tar.xz ac15cdae0ce8015d1d58719e209ac42369c6042b 6115 nginx_1.18.0-6.1+deb11u8_source.buildinfo Checksums-Sha256: 8d40cecffbebf5ad2f21f4a6996758be110cdcadab6be8fb127eb4b303256483 4826 nginx_1.18.0-6.1+deb11u8.dsc 4c373e7ab5bf91d34a4f11a0c9496561061ba5eee6020db272a17a7228d35f99 1039530 nginx_1.18.0.orig.tar.gz 71083832dbcedb7cbbe3b849805a6f87dfe7a3b7c3de7997b8c12ffc716f1014 455 nginx_1.18.0.orig.tar.gz.asc 13619a76e4a3cc256ec8de4655dfdcf058207d303460ecf088f13ea1bf7dd963 1057000 nginx_1.18.0-6.1+deb11u8.debian.tar.xz 72360b0ecff3f3ffea0c1d4a7ca0b5264b3ed3102df4fcb519839d43241cc971 6115 nginx_1.18.0-6.1+deb11u8_source.buildinfo Files: 422ec36cda745ecc8a9f0fe4564830f6 4826 httpd optional nginx_1.18.0-6.1+deb11u8.dsc b2d33d24d89b8b1f87ff5d251aa27eb8 1039530 httpd optional nginx_1.18.0.orig.tar.gz 3f0d891d096a9f169ef9a183e6a76b1f 455 httpd optional nginx_1.18.0.orig.tar.gz.asc 5d339a830b1d7fca3e4bb313bd8aa4a7 1057000 httpd optional nginx_1.18.0-6.1+deb11u8.debian.tar.xz 0e84c205aaad0d2bb37978dc0eafa86b 6115 httpd optional nginx_1.18.0-6.1+deb11u8_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJNBAEBCgA3FiEECgzx8d8+AINglLHJt4M9ggJ8mQsFAmpEdf8ZHGNoYXJsZXNt ZWxhcmFAcmlzZXVwLm5ldAAKCRC3gz2CAnyZCyXTEAC5AbnSJL9BKJlYHQ+Gg75b YLKm3saBcg817u+Zp/aMDcOs22eQE+2lySekmpceGdJACPs2ByDgyevxAqh4wXaH n4uzEMDHmUKu2X/ZBl7TRrZkcKVdh6WQo0z+j1LIPmUp1bT8fKAZV5IFse7bVVQJ pwriiCv2HOmz8gZ8fuSOS4RtpW9Hie0OOf9neylvo9XIK4vn/DeEtVf+MU62zS9K 8bVYxL2PhaeSsaMAd96hmMym4Op7SILUtDO63v6ObbhTrJS9RQvzmRGpOsa6gUJY uDjOxBS4+TaSV7NGKhs3dc61MMglAYCCFBE1PPVg2djCaXxqr6dNofDod16VK+6v BGlgHBWXZS4AmrWtDqkQhEnj/iqg6IGlBXzpndmHuJTFlpv/aKOnE6b30wSG1TrD 6KTRxUe8GNK8kiojc1BHv4tJGtJaV0FcliGFePrlkVUHgJUBFBU+f3mM/KLM6ogQ rz4RkU6ZkCKuf+1IHPU/SI9/91nO2ZQ7eJ7Kxv6TbwtZ1ATlBvNJcXa+P7zUW92K 2bJen3pIToOeCFK0+pLeCksSgAPZ6My/4b8jlXunKifH1+J6G9ZUlP5VlMvY2tM4 08/G+3kME86J/EOrr5vhp0JLvqWAm/w2nGc5zt2F5KiuzT/hYX8N61qtS+QSpUGu F4RpRNk/KSFOd9hnYrj6dg== =0p9b -----END PGP SIGNATURE-----
