-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 16 Sep 2026 17:35:33 +0000
Source: nginx
Architecture: source
Version: 1.30.4-7
Distribution: unstable
Urgency: medium
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Changes:
nginx (1.30.4-7) unstable; urgency=medium
.
* d/p/CVE-2026-90439.patch: add, backport the QUIC OpenSSL compatibility fix
to register the transport parameters extension in all SSL contexts
when QUIC is enabled (CVE-2026-90439).
Checksums-Sha1:
2c4a95662dee109d283512017327933733e1396b 3934 nginx_1.30.4-7.dsc
5e49dd3557c6cffbfc54e9cfb28e08bf7a45741d 79640 nginx_1.30.4-7.debian.tar.xz
4d148b6cfa5c1784ca120d6819386bb2e161ca3d 3190624 nginx_1.30.4-7.git.tar.xz
55582e30208b8feb8bb952669dc5e2e3ff437974 17664 nginx_1.30.4-7_source.buildinfo
Checksums-Sha256:
b5779527688e3a2d1c83a9f30426a66446390a9bfcde2f48f89660bc658ed9c0 3934 nginx_1.30.4-7.dsc
40f03d8a2a7aa1df929db30a8292a32e9601b32a082ab02d0596d6fb9ec4872b 79640 nginx_1.30.4-7.debian.tar.xz
59b03c76287d1ce66a783037b325267e4ea49650aeac66a1eb0494c10a5a4ade 3190624 nginx_1.30.4-7.git.tar.xz
528a5ddf7b13c59445dbc81186e46f6899eda85b6dc8c3692a4cf5ae56a08bd8 17664 nginx_1.30.4-7_source.buildinfo
Files:
884be55bbe32ed66e3b14f5a490665ff 3934 httpd optional nginx_1.30.4-7.dsc
f211a02cae8b15be8356ad81439cfcca 79640 httpd optional nginx_1.30.4-7.debian.tar.xz
ee1f0c5aa7b11bf2ec4fed224eaaf821 3190624 httpd None nginx_1.30.4-7.git.tar.xz
a59f62ca767c09379947b95cf28c7573 17664 httpd optional nginx_1.30.4-7_source.buildinfo
Git-Tag-Info: tag=b69acfbf4ebbbcc1a337e8c1f0fbf4806de31a0e fp=d008b0c23d8479e46b9fcb9045da517496939ff9
Git-Tag-Tagger: Jan Mojžíš <jan.mojzis@gmail.com>
-----BEGIN PGP SIGNATURE-----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=PXb7
-----END PGP SIGNATURE-----
