-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 15 Oct 2026 01:33:49 +0000
Source: nginx
Architecture: source
Version: 1.30.4-8
Distribution: unstable
Urgency: high
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Changes:
nginx (1.30.4-8) unstable; urgency=high
.
* Backport security fixes from upstream 1.30.6:
- d/p/CVE-2026-15176.patch: reject URI to path mapping with alias
after a rewrite changed the URI (CVE-2026-15176).
- d/p/CVE-2026-93479.patch: protect reserved memory when evaluating
string expressions in HTTP and stream modules (CVE-2026-93479).
- d/p/CVE-2026-95101.patch: keep skipped HTTP/3 frame payload separate
from request body data, preserving nginx-dev ABI compatibility
(CVE-2026-95101).
- d/p/CVE-2026-97629.patch: initialize all worker session ticket keys
during key rotation (CVE-2026-97629.patch).
- d/p/CVE-2026-97205.patch: limit pending asynchronous operations
to prevent the request blocked counter from overflowing (CVE-2026-97205).
Checksums-Sha1:
2e47df31c85c8915f4131df153bf215069c53068 3934 nginx_1.30.4-8.dsc
35dde1003957ef7443408cf158f1721f8a7a12fe 83872 nginx_1.30.4-8.debian.tar.xz
9f9fdd4150a5cce437b095c214ac3c08fe7d0bc0 3200940 nginx_1.30.4-8.git.tar.xz
9b82cb3015b4e85a2150b3ec77c9461319423a78 17720 nginx_1.30.4-8_source.buildinfo
Checksums-Sha256:
5989bc4f09418764c11092ae4b271520c8b9ea014573e72d9b6fa4df09b08632 3934 nginx_1.30.4-8.dsc
738acc983a547985a42b2a8f0fc39ee8391730315dc2eaf00f7dc259430558e7 83872 nginx_1.30.4-8.debian.tar.xz
14205a62294015aec7789e04b807cf44fb3b7333c55696bd28148af29670ad6c 3200940 nginx_1.30.4-8.git.tar.xz
c3c0b36c0f2c6d73a170fa37477c69cb1c821459946828307be1bf1a609fa105 17720 nginx_1.30.4-8_source.buildinfo
Files:
e87a90c896fa43cc96666c35df48043f 3934 httpd optional nginx_1.30.4-8.dsc
e50837b3332dfd9adc86227951d30dc5 83872 httpd optional nginx_1.30.4-8.debian.tar.xz
bd37b6c34390bcb25352ba27e37c0014 3200940 httpd None nginx_1.30.4-8.git.tar.xz
04b882119118e5dbe1b9895a551b429d 17720 httpd optional nginx_1.30.4-8_source.buildinfo
Git-Tag-Info: tag=c01ef64851aa724aa558190e4fe40ad8ee32729a fp=d008b0c23d8479e46b9fcb9045da517496939ff9
Git-Tag-Tagger: Jan Mojžíš <jan.mojzis@gmail.com>
-----BEGIN PGP SIGNATURE-----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=f22J
-----END PGP SIGNATURE-----
