-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 27 Jun 2026 22:33:06 +0200
Source: nginx
Binary: nginx-common nginx-core nginx-dev nginx-doc nginx-full nginx-light
Architecture: all
Version: 1.26.3-3+deb13u7
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 nginx-common - small, powerful, scalable web/proxy server - common files
 nginx-core - nginx web/proxy server (standard version)
 nginx-dev  - nginx web/proxy server - development headers
 nginx-doc  - small, powerful, scalable web/proxy server - documentation
 nginx-full - nginx web/proxy server (standard version with 3rd parties)
 nginx-light - nginx web/proxy server (basic version)
Closes: 1140359 1140361
Changes:
 nginx (1.26.3-3+deb13u7) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Upstream: limit header length for HTTP/2 and gRPC (CVE-2026-42055)
     (Closes: #1140359)
   * Charset: fixed another rare buffer overread in recode_from_utf8()
     (CVE-2026-48142) (Closes: #1140361)
Checksums-Sha1:
 2e98a83cd0bad59feafe006506df73d1d9c6b47e 111248 nginx-common_1.26.3-3+deb13u7_all.deb
 b6ef49e985f19667ecda46c9cf0817240a823c10 84452 nginx-core_1.26.3-3+deb13u7_all.deb
 eb4ef4d3e13806e00cb3fb68517d06c4ef450a2b 197300 nginx-dev_1.26.3-3+deb13u7_all.deb
 276f092e54d23fa503c6ae629b4eb4375445f1fe 92552 nginx-doc_1.26.3-3+deb13u7_all.deb
 6e606cd24039bafb9a97937358ddff15131996ae 84472 nginx-full_1.26.3-3+deb13u7_all.deb
 f7811a7b3dac91d20a668cfa4c9b73a4ba3f1e5a 84224 nginx-light_1.26.3-3+deb13u7_all.deb
 0d8b93dc75cc1b8dbea5c1e3164e831df6843ad8 9899 nginx_1.26.3-3+deb13u7_all-buildd.buildinfo
Checksums-Sha256:
 212d3cccd493965a646b3ed11f3541c573b67f957b508703c1b55a8d8875f64d 111248 nginx-common_1.26.3-3+deb13u7_all.deb
 53a1d7927f2430f5d560185f8903106c3d6f7ac9bd2696be20b190f2685b77d9 84452 nginx-core_1.26.3-3+deb13u7_all.deb
 6dab68bb55be1131b5da64f6a3e916442c7b2e54420a88e84d4501491534533a 197300 nginx-dev_1.26.3-3+deb13u7_all.deb
 6a8497fd98adc46af8d8abad84e3849b0f1340583cd9654d61eba73d2d11e377 92552 nginx-doc_1.26.3-3+deb13u7_all.deb
 af65f7503d362941edb51e8e8c047899d9482a22272c33d2722787ed1bd54cb5 84472 nginx-full_1.26.3-3+deb13u7_all.deb
 f21dbb4981783d9b84a0d862859971950c2d248f4898ce3243aa6160c0efed9a 84224 nginx-light_1.26.3-3+deb13u7_all.deb
 3c6aba6d3f481af7e8ad1b7e1d5571515714120197ae403c5c36fe0502517a82 9899 nginx_1.26.3-3+deb13u7_all-buildd.buildinfo
Files:
 af8a7ca2a30ebdab1340f36127a08e8a 111248 httpd optional nginx-common_1.26.3-3+deb13u7_all.deb
 19bf8d04677ef29b4066833a027b6f32 84452 httpd optional nginx-core_1.26.3-3+deb13u7_all.deb
 845dc0d5757c9eec5e7be5612a1363e3 197300 httpd optional nginx-dev_1.26.3-3+deb13u7_all.deb
 6dffe7aa2d2801f7bed212893ccb2079 92552 doc optional nginx-doc_1.26.3-3+deb13u7_all.deb
 3dc0742f54be716dc25b674865f055e7 84472 httpd optional nginx-full_1.26.3-3+deb13u7_all.deb
 bb1f518561f2d54015dd8985aa76b76a 84224 httpd optional nginx-light_1.26.3-3+deb13u7_all.deb
 dda0e05d8544a28f889284def829ee0f 9899 httpd optional nginx_1.26.3-3+deb13u7_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Mn0g
-----END PGP SIGNATURE-----