-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 18 Jul 2026 16:18:45 +0000
Source: nginx
Architecture: source
Version: 1.22.1-9+deb12u10
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Changes:
nginx (1.22.1-9+deb12u10) bookworm-security; urgency=medium
.
* d/p/CVE-2026-56434.patch add, backport fix for use-after-free when using
ngx_http_ssi_module (CVE-2026-56434)
* d/p/CVE-2026-60005.patch add, backport fix for memory disclosure
vulnerability when using ngx_http_slice_module (CVE-2026-60005)
* d/p/CVE-2026-42533.patch add, backport fix for buffer overflow
vulnerability when using map with regex (CVE-2026-42533)
A big thanks to Aron Xu for preparing the patch.
* d/t/nginx-dev-test.sh add, verify that nginx-dev can build and load
a minimal third-party dynamic HTTP module.
Checksums-Sha1:
2ea58a87653cadb69a98cc810da1dcb4556bb826 3578 nginx_1.22.1-9+deb12u10.dsc
45a89797f7c789287c7f663811efbbd19e84f154 1073948 nginx_1.22.1.orig.tar.gz
5f5d6059659cd699c1e919120f34a34085f31113 95756 nginx_1.22.1-9+deb12u10.debian.tar.xz
ae5c98740fb208de03fc2025cad14d958cad6ae0 6074 nginx_1.22.1-9+deb12u10_source.buildinfo
Checksums-Sha256:
cd1966d8ac12a78feb009b0add66dec191c8c561de1cbd3a123594d2e54936ad 3578 nginx_1.22.1-9+deb12u10.dsc
9ebb333a9e82b952acd3e2b4aeb1d4ff6406f72491bab6cd9fe69f0dea737f31 1073948 nginx_1.22.1.orig.tar.gz
a5a60f970ef19c926da4f71a0398d00f3fccf4f35169f0994c7d6573d148d63f 95756 nginx_1.22.1-9+deb12u10.debian.tar.xz
c0816eaa8df784043918add66a7bc55131dd3d3003fbb3682ba80be0f1ad774d 6074 nginx_1.22.1-9+deb12u10_source.buildinfo
Files:
00b42f14e7832c3ef4ba9f0f3a1a15a3 3578 httpd optional nginx_1.22.1-9+deb12u10.dsc
8296d957561aeed0261d9be4d3decaec 1073948 httpd optional nginx_1.22.1.orig.tar.gz
64221d1d181a05face96b97a1787babc 95756 httpd optional nginx_1.22.1-9+deb12u10.debian.tar.xz
cfbe982c33826dcc9071263895c20078 6074 httpd optional nginx_1.22.1-9+deb12u10_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=H0rR
-----END PGP SIGNATURE-----
