-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Mar 2026 19:10:24 +0000
Source: nginx
Binary: nginx-common nginx-core nginx-dev nginx-doc nginx-full nginx-light
Architecture: all
Version: 1.22.1-9+deb12u5
Distribution: bookworm
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Description:
 nginx-common - small, powerful, scalable web/proxy server - common files
 nginx-core - nginx web/proxy server (standard version)
 nginx-dev  - nginx web/proxy server - development headers
 nginx-doc  - small, powerful, scalable web/proxy server - documentation
 nginx-full - nginx web/proxy server (standard version with 3rd parties)
 nginx-light - nginx web/proxy server (basic version)
Changes:
 nginx (1.22.1-9+deb12u5) bookworm; urgency=medium
 .
   * backport changes from upstream nginx, fixes for buffer overflow
     vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow
     vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647),
     mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753)
     and OCSP result bypass vulnerability in stream (CVE-2026-28755)
     * d/p/CVE-2026-27651.patch add
     * d/p/CVE-2026-27654.patch add
     * d/p/CVE-2026-27784.patch add
     * d/p/CVE-2026-28753.patch add
     * d/p/CVE-2026-28755.patch add
     * d/p/CVE-2026-32647.patch add
Checksums-Sha1:
 d0594fa7bab365630ef6e84ccca3a5ab3ab4f2a7 112760 nginx-common_1.22.1-9+deb12u5_all.deb
 8804f7b80f6f37130c8471e85bb24228895da3e0 80248 nginx-core_1.22.1-9+deb12u5_all.deb
 ef20a9e7e99a3e40a93365f0dcc8eb0b5e22da0b 176764 nginx-dev_1.22.1-9+deb12u5_all.deb
 76ff5cd1a12da4c5c4a073f4a06768d4a227da7d 88304 nginx-doc_1.22.1-9+deb12u5_all.deb
 7b551a17d3db9b66c71ab6d8a18e01b3bf73551c 80312 nginx-full_1.22.1-9+deb12u5_all.deb
 25dc30ef499e23a8165798816cb196b1eeb6a1b6 80016 nginx-light_1.22.1-9+deb12u5_all.deb
 e2066f9297e1e691a5489b60a0628fc51fae7c77 10136 nginx_1.22.1-9+deb12u5_all-buildd.buildinfo
Checksums-Sha256:
 ba6cb4d4de6567f5fd8f41f6f8dc571f23748d8cb42601dd843de7f8d53b5581 112760 nginx-common_1.22.1-9+deb12u5_all.deb
 55394266f1a1673b91dd14aa26b5fbc66f71bab934ecdde6520e659a2973f87e 80248 nginx-core_1.22.1-9+deb12u5_all.deb
 2d4e66b40348ff5dbb487a6a53886dd82a9c61b6df0d65faf433603219a13320 176764 nginx-dev_1.22.1-9+deb12u5_all.deb
 e15d3ff40301ae8bc082cb1cd5d2727ca39fd61a3e81b57d881db4c61cd80d4e 88304 nginx-doc_1.22.1-9+deb12u5_all.deb
 ae46dafa5d4afe1ee14291e667df347b3325d99c1127e7055cb40befaad9d86c 80312 nginx-full_1.22.1-9+deb12u5_all.deb
 4d9c787cedb399cfc1124a611605a21fc03d6d38511957bcc174b3a1585a8e3b 80016 nginx-light_1.22.1-9+deb12u5_all.deb
 751af63e19239c565b11047f05bf8989ad122e1f6f78b7f69e2ac7acb5aa1707 10136 nginx_1.22.1-9+deb12u5_all-buildd.buildinfo
Files:
 b60fed267f23ad733e701069a900fd3f 112760 httpd optional nginx-common_1.22.1-9+deb12u5_all.deb
 134a71f9eb96e834c4fda2d16d1cd77c 80248 httpd optional nginx-core_1.22.1-9+deb12u5_all.deb
 dc7faa3c0c034f4a71b914d746ea3fcc 176764 httpd optional nginx-dev_1.22.1-9+deb12u5_all.deb
 c7a3d9b0bb81d75b9987bfad70d02508 88304 doc optional nginx-doc_1.22.1-9+deb12u5_all.deb
 491544ad65732b7e9a4e49e08c6245d8 80312 httpd optional nginx-full_1.22.1-9+deb12u5_all.deb
 4d64d29f01da4f468821b4327c9ca157 80016 httpd optional nginx-light_1.22.1-9+deb12u5_all.deb
 b5c455f7c15bd754f9ce76934153b917 10136 httpd optional nginx_1.22.1-9+deb12u5_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=vOto
-----END PGP SIGNATURE-----