-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 04 Sep 2026 17:02:15 +0000
Source: nginx
Architecture: source
Version: 1.26.3-3+deb13u8
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Changes:
nginx (1.26.3-3+deb13u8) trixie-security; urgency=medium
.
* d/t/abicheck add, detect unintended API changes in the nginx-dev
package by comparing header files with previous version
* d/p/CVE-2026-56434.patch add, backport fix for use-after-free when using
ngx_http_ssi_module (CVE-2026-56434)
* d/p/CVE-2026-60005.patch add, backport fix for memory disclosure
vulnerability when using ngx_http_slice_module (CVE-2026-60005)
* d/p/CVE-2026-42533.patch add, backport fix for buffer overflow
vulnerability when using map with regex (CVE-2026-42533)
A big thanks to Aron Xu for preparing the patch.
Checksums-Sha1:
7f22563cf5da8957765d0459851e833923571e2f 3456 nginx_1.26.3-3+deb13u8.dsc
3f32bd9ffae9b04de0f499a8a7ed82967b0f2213 102448 nginx_1.26.3-3+deb13u8.debian.tar.xz
906bacb64e9378a172d5b14fe91fb99d90fb1f49 6199 nginx_1.26.3-3+deb13u8_source.buildinfo
Checksums-Sha256:
3f16c6956fe8c2ab04fec57e8a890fb9fde628829d7b3ecf6ba08430282cc0c6 3456 nginx_1.26.3-3+deb13u8.dsc
a8160f5c3d57889d8137c495e7aca912bc71862b8e486b85e87e81f5704f9a6f 102448 nginx_1.26.3-3+deb13u8.debian.tar.xz
0a2764b0730867167fb1be0576110be295ee2a5c1b54f7a617bdb5190d2c7888 6199 nginx_1.26.3-3+deb13u8_source.buildinfo
Files:
731f385b4419146bcadd28a1afbb6a42 3456 httpd optional nginx_1.26.3-3+deb13u8.dsc
b4ed4a9a71b83d9223f7f60231f01122 102448 httpd optional nginx_1.26.3-3+deb13u8.debian.tar.xz
417d894f381822d091be75b531f5aaf5 6199 httpd optional nginx_1.26.3-3+deb13u8_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmqkDyYACgkQ+GQ1dHE8
m66LkAf/VFmefFOg13LqWrhJxU7ApYAQKaa7vvS3RD8sjooImMFI+6ZQK8kgxA6d
fs+UUONLae1jD++k+KcOMuaHnLZHxAkNKZ0ciJ1Kevsbcr9ySKVrvJ7McmXE41Dv
5OSueWaXrTYvz7HugAxWeTTQaZwp9AK7k7HmgaDyIgSwe1OjHuqkRLGKQ6QX1BdR
d0FqhRD5/ROGRRAGftvlCND3jHW4T3jOvrMjZ/gIZ7AHkJOEY5R/Fedndix89wu/
yq/d+mWyGHipQihImRRpGukGOirHm4TMdND7FKKiuKHBQwqbfbKdFkA/W3QUW3eG
FqOE1JqosaWBwYQZAIN9UHzvd9yt2Q==
=fM/H
-----END PGP SIGNATURE-----
