Author: Ubuntu Git Importer
Author Date: 2020-07-03 16:57:33 UTC

DSC file for 1.18.0-4

Author: Ondřej Nový
Author Date: 2020-07-03 07:34:49 UTC

1.18.0-4 (patches unapplied)

Imported using git-ubuntu import.

Author: Ondřej Nový
Author Date: 2020-07-03 07:34:49 UTC

1.18.0-4 (patches applied)

Imported using git-ubuntu import.

Author: Ubuntu Git Importer
Author Date: 2020-06-26 01:04:46 UTC

DSC file for 1.18.0-3ubuntu1

Author: Bryce Harrington
Author Date: 2020-06-24 23:15:11 UTC

1.18.0-3ubuntu1 (patches applied)

Imported using git-ubuntu import.

Author: Bryce Harrington
Author Date: 2020-06-24 23:15:11 UTC

1.18.0-3ubuntu1 (patches applied)

Imported using git-ubuntu import.

Author: Bryce Harrington
Author Date: 2020-06-24 23:15:11 UTC

1.18.0-3ubuntu1 (patches applied)

Imported using git-ubuntu import.

Author: Bryce Harrington
Author Date: 2020-06-24 23:18:05 UTC

changelog cleanup

Author: Bryce Harrington
Author Date: 2020-06-24 23:18:05 UTC

changelog cleanup

Author: Bryce Harrington
Author Date: 2020-06-24 23:18:05 UTC

changelog cleanup

Author: Thomas Ward
Author Date: 2020-04-21 10:49:01 UTC

Import patches-unapplied version 1.18.0-0ubuntu1 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: ede84b2c5c7272488cbfb95fe21db3fc260a0379

New changelog entries:
  * Stable Release Update for Version String (LP: #1875231)
  * New upstream Stable release (1.18.0) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-21 10:49:01 UTC

Import patches-unapplied version 1.18.0-0ubuntu1 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: ede84b2c5c7272488cbfb95fe21db3fc260a0379

New changelog entries:
  * Stable Release Update for Version String (LP: #1875231)
  * New upstream Stable release (1.18.0) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-21 10:49:01 UTC

Import patches-applied version 1.18.0-0ubuntu1 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 185a4af817b5c68f562e2d0dfcada928dfd0d4c4
Unapplied parent: 24c97752f56301d58af81e5b0f4e5ef78e615dcd

New changelog entries:
  * Stable Release Update for Version String (LP: #1875231)
  * New upstream Stable release (1.18.0) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-21 10:49:01 UTC

Import patches-unapplied version 1.18.0-0ubuntu1 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: ede84b2c5c7272488cbfb95fe21db3fc260a0379

New changelog entries:
  * Stable Release Update for Version String (LP: #1875231)
  * New upstream Stable release (1.18.0) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-21 10:49:01 UTC

Import patches-applied version 1.18.0-0ubuntu1 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 185a4af817b5c68f562e2d0dfcada928dfd0d4c4
Unapplied parent: 24c97752f56301d58af81e5b0f4e5ef78e615dcd

New changelog entries:
  * Stable Release Update for Version String (LP: #1875231)
  * New upstream Stable release (1.18.0) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-21 10:49:01 UTC

Import patches-applied version 1.18.0-0ubuntu1 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 185a4af817b5c68f562e2d0dfcada928dfd0d4c4
Unapplied parent: 24c97752f56301d58af81e5b0f4e5ef78e615dcd

New changelog entries:
  * Stable Release Update for Version String (LP: #1875231)
  * New upstream Stable release (1.18.0) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-14 12:53:34 UTC

Import patches-unapplied version 1.17.10-0ubuntu1 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: a32159461fba9c483acad10b1f7b4722d53ed207

New changelog entries:
  * New upstream release (1.17.9) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-14 12:53:34 UTC

Import patches-applied version 1.17.10-0ubuntu1 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 9cf00f9d5e8b4ee02ea0427e247699f3b8d20348
Unapplied parent: cdd04dafa086bec38322a34829e0efd3ecf02796

New changelog entries:
  * New upstream release (1.17.9) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-14 12:53:34 UTC

Import patches-unapplied version 1.17.10-0ubuntu1 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: a32159461fba9c483acad10b1f7b4722d53ed207

New changelog entries:
  * New upstream release (1.17.9) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Thomas Ward
Author Date: 2020-04-14 12:53:34 UTC

Import patches-applied version 1.17.10-0ubuntu1 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 9cf00f9d5e8b4ee02ea0427e247699f3b8d20348
Unapplied parent: cdd04dafa086bec38322a34829e0efd3ecf02796

New changelog entries:
  * New upstream release (1.17.9) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors
    - d/{control,rules,copyright,modules/http-geoip2*}: Add GeoIP2 third party
      module to nginx-full and nginx-extras (and use proper DEP5 syntax for
      d/copyright).
    - d/control, d/rules: Drop GeoIP from nginx-core due to demotion of
      libgeoip.

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:15 UTC

Import patches-applied version 1.15.9-0ubuntu1.2 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 3a852aceaf3b430cf70c17001399755d8df52703
Unapplied parent: 663619f42f3bd1c03b05502f67362182879dd1dc

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:15 UTC

Import patches-applied version 1.15.9-0ubuntu1.2 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 3a852aceaf3b430cf70c17001399755d8df52703
Unapplied parent: 663619f42f3bd1c03b05502f67362182879dd1dc

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:15 UTC

Import patches-unapplied version 1.15.9-0ubuntu1.2 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: a2a00253ec9a2fa346ddddfdcb5a7306b4f8e461

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:15 UTC

Import patches-unapplied version 1.15.9-0ubuntu1.2 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: a2a00253ec9a2fa346ddddfdcb5a7306b4f8e461

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:15 UTC

Import patches-applied version 1.15.9-0ubuntu1.2 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 3a852aceaf3b430cf70c17001399755d8df52703
Unapplied parent: 663619f42f3bd1c03b05502f67362182879dd1dc

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:15 UTC

Import patches-unapplied version 1.15.9-0ubuntu1.2 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: a2a00253ec9a2fa346ddddfdcb5a7306b4f8e461

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:38 UTC

Import patches-applied version 1.14.0-0ubuntu1.7 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: f562bb59edd656cade960b9eaee73f98445f5459
Unapplied parent: 8e21b4dc6f56cacd0737c7b47e9f9ed956ee72e6

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:38 UTC

Import patches-unapplied version 1.14.0-0ubuntu1.7 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 3a67d2033b1547dc784fa88f488e3d44395331f4

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:38 UTC

Import patches-applied version 1.14.0-0ubuntu1.7 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: f562bb59edd656cade960b9eaee73f98445f5459
Unapplied parent: 8e21b4dc6f56cacd0737c7b47e9f9ed956ee72e6

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:38 UTC

Import patches-unapplied version 1.14.0-0ubuntu1.7 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 3a67d2033b1547dc784fa88f488e3d44395331f4

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:38 UTC

Import patches-unapplied version 1.14.0-0ubuntu1.7 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 3a67d2033b1547dc784fa88f488e3d44395331f4

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:18:38 UTC

Import patches-applied version 1.14.0-0ubuntu1.7 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: f562bb59edd656cade960b9eaee73f98445f5459
Unapplied parent: 8e21b4dc6f56cacd0737c7b47e9f9ed956ee72e6

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:19:02 UTC

Import patches-applied version 1.10.3-0ubuntu0.16.04.5 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 7ba032c881a9dd20e9150fd8ca34c573d44f2b6b
Unapplied parent: 2322168300e1beafbc293da2fc8e679024620d3c

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:19:02 UTC

Import patches-unapplied version 1.10.3-0ubuntu0.16.04.5 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 207f8f06533f78a5309c94fcd7f4cea034a73447

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:19:02 UTC

Import patches-unapplied version 1.10.3-0ubuntu0.16.04.5 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 207f8f06533f78a5309c94fcd7f4cea034a73447

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:19:02 UTC

Import patches-unapplied version 1.10.3-0ubuntu0.16.04.5 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 207f8f06533f78a5309c94fcd7f4cea034a73447

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:19:02 UTC

Import patches-applied version 1.10.3-0ubuntu0.16.04.5 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 7ba032c881a9dd20e9150fd8ca34c573d44f2b6b
Unapplied parent: 2322168300e1beafbc293da2fc8e679024620d3c

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:19:02 UTC

Import patches-applied version 1.10.3-0ubuntu0.16.04.5 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 7ba032c881a9dd20e9150fd8ca34c573d44f2b6b
Unapplied parent: 2322168300e1beafbc293da2fc8e679024620d3c

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:16:29 UTC

Import patches-applied version 1.16.1-0ubuntu2.1 to applied/ubuntu/eoan-security

Imported using git-ubuntu import.

Changelog parent: a2dae5a3ae2f827e7139e9693b6d6e150947b0cf
Unapplied parent: 6d69a252627d87c096b4f550a577dc9dde6501ca

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:16:29 UTC

Import patches-applied version 1.16.1-0ubuntu2.1 to applied/ubuntu/eoan-security

Imported using git-ubuntu import.

Changelog parent: a2dae5a3ae2f827e7139e9693b6d6e150947b0cf
Unapplied parent: 6d69a252627d87c096b4f550a577dc9dde6501ca

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:16:29 UTC

Import patches-unapplied version 1.16.1-0ubuntu2.1 to ubuntu/eoan-security

Imported using git-ubuntu import.

Changelog parent: 897c9c5d5630c4aaa17c5fc8c67e5691609e3fe0

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:16:29 UTC

Import patches-unapplied version 1.16.1-0ubuntu2.1 to ubuntu/eoan-security

Imported using git-ubuntu import.

Changelog parent: 897c9c5d5630c4aaa17c5fc8c67e5691609e3fe0

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:16:29 UTC

Import patches-unapplied version 1.16.1-0ubuntu2.1 to ubuntu/eoan-security

Imported using git-ubuntu import.

Changelog parent: 897c9c5d5630c4aaa17c5fc8c67e5691609e3fe0

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: Marc Deslauriers
Author Date: 2020-01-10 14:16:29 UTC

Import patches-applied version 1.16.1-0ubuntu2.1 to applied/ubuntu/eoan-security

Imported using git-ubuntu import.

Changelog parent: a2dae5a3ae2f827e7139e9693b6d6e150947b0cf
Unapplied parent: 6d69a252627d87c096b4f550a577dc9dde6501ca

New changelog entries:
  * SECURITY UPDATE: request smuggling via error_page
    - debian/patches/CVE-2019-20372.patch: discard request body when
      redirecting to a URL via error_page in
      src/http/ngx_http_special_response.c.
    - CVE-2019-20372

Author: ctrochalakis
Author Date: 2019-10-13 07:30:32 UTC

Import patches-unapplied version 1.16.1-3~exp2 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 9410524ef4b4a205610f5568b53c15b75ca68da2

New changelog entries:
  * Skip http-lua on architectures where LuaJIT is not available
  * http-lua: Upgrade to 0.10.15

Author: ctrochalakis
Author Date: 2019-10-13 07:30:32 UTC

Import patches-applied version 1.16.1-3~exp2 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: adb7cb4f4ee2985a010fdd5202d0fcff4d0bbf8d
Unapplied parent: 918e1c529e3cc429e83cd68bae515f67310a4b4c

New changelog entries:
  * Skip http-lua on architectures where LuaJIT is not available
  * http-lua: Upgrade to 0.10.15

Author: ctrochalakis
Author Date: 2019-08-19 09:31:19 UTC

Import patches-applied version 1.10.3-1+deb9u3 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 09dc57cc5079dc49c7f7dac61c436adaeb4be370
Unapplied parent: fea9f288fcc52e40bbd8068c2a09d166429d1ef4

New changelog entries:
  * Backport upstream fixes for 3 CVEs (Closes: #935037)
    Those fixes affect Nginx HTTP/2 implementation, which might cause
    excessive memory consumption and CPU usage.
    (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516).

Author: ctrochalakis
Author Date: 2019-08-19 09:31:19 UTC

Import patches-unapplied version 1.10.3-1+deb9u3 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 01ccbc555d1b24df5e3ed90cefa5dad47707c0a7

New changelog entries:
  * Backport upstream fixes for 3 CVEs (Closes: #935037)
    Those fixes affect Nginx HTTP/2 implementation, which might cause
    excessive memory consumption and CPU usage.
    (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516).

Author: ctrochalakis
Author Date: 2019-08-13 18:10:28 UTC

Import patches-applied version 1.14.2-2+deb10u1 to applied/debian/buster

Imported using git-ubuntu import.

Changelog parent: ab492eeb32c61de117771f93a8a655dff19e36d5
Unapplied parent: e82bd7c93de4dce8d850750dbba8c03f782850e3

New changelog entries:
  * Backport upstream fixes for 3 CVEs (Closes: #935037)
    Those fixes affect Nginx HTTP/2 implementation, which might cause
    excessive memory consumption and CPU usage.
    (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516).

Author: ctrochalakis
Author Date: 2019-08-13 18:10:28 UTC

Import patches-unapplied version 1.14.2-2+deb10u1 to debian/buster

Imported using git-ubuntu import.

Changelog parent: 17ba0928fb3f16785c68964e011b63ba85b7961d

New changelog entries:
  * Backport upstream fixes for 3 CVEs (Closes: #935037)
    Those fixes affect Nginx HTTP/2 implementation, which might cause
    excessive memory consumption and CPU usage.
    (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516).

Author: Marc Deslauriers
Author Date: 2019-08-16 11:05:57 UTC

Import patches-applied version 1.14.0-0ubuntu1.5 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 66fbe3e9a6b4482f8078b7f51f84f8efb87e4b63
Unapplied parent: c9baf74ad3b849bc82c66d7ddf4371473b0b7463

New changelog entries:
  * No change rebuild for bionic outside of security pocket to pick up
    OpenSSL 1.1.1. (LP: #1840404)

Author: Marc Deslauriers
Author Date: 2019-08-16 11:05:57 UTC

Import patches-unapplied version 1.14.0-0ubuntu1.5 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 6e42ad0031f2aeb1b683f49d7c1e815f4f4fc59d

New changelog entries:
  * No change rebuild for bionic outside of security pocket to pick up
    OpenSSL 1.1.1. (LP: #1840404)

Author: Thomas Ward
Author Date: 2019-08-15 16:01:39 UTC

Import patches-applied version 1.16.1-0ubuntu2 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 2ea41069f78b898494f532e786a64e4c1b7ba98b
Unapplied parent: 2fb2ce076cae98c38a3e5bb8ac096f80ab90f687

New changelog entries:
  * d/conf/sites-available/default: Update PHP referred to in the
    example in the default configuration to PHP 7.2.
    (LP: #1831748)

Author: Thomas Ward
Author Date: 2019-08-15 16:01:39 UTC

Import patches-applied version 1.16.1-0ubuntu2 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 2ea41069f78b898494f532e786a64e4c1b7ba98b
Unapplied parent: 2fb2ce076cae98c38a3e5bb8ac096f80ab90f687

New changelog entries:
  * d/conf/sites-available/default: Update PHP referred to in the
    example in the default configuration to PHP 7.2.
    (LP: #1831748)

Author: Thomas Ward
Author Date: 2019-08-15 16:01:39 UTC

Import patches-unapplied version 1.16.1-0ubuntu2 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 316bdd16b627161bdb8b412865d18275ea5c2fd2

New changelog entries:
  * d/conf/sites-available/default: Update PHP referred to in the
    example in the default configuration to PHP 7.2.
    (LP: #1831748)

Author: Thomas Ward
Author Date: 2019-08-15 16:01:39 UTC

Import patches-unapplied version 1.16.1-0ubuntu2 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 316bdd16b627161bdb8b412865d18275ea5c2fd2

New changelog entries:
  * d/conf/sites-available/default: Update PHP referred to in the
    example in the default configuration to PHP 7.2.
    (LP: #1831748)

Author: Thomas Ward
Author Date: 2019-02-26 16:15:07 UTC

Import patches-applied version 1.15.9-0ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 52826b5336cd430f09c5dc6a9e46c07915dd73bd
Unapplied parent: 8dd3ca424ee676674c6f12f234296d40db210d9c

New changelog entries:
  * New upstream release (1.15.9) - full changelog available from
    http://nginx.org/en/CHANGES (LP: #1817750)
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors

Author: Thomas Ward
Author Date: 2019-02-26 16:15:07 UTC

Import patches-unapplied version 1.15.9-0ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: f3e5bd142893ea7b6945c2a7f561b67eac800fbc

New changelog entries:
  * New upstream release (1.15.9) - full changelog available from
    http://nginx.org/en/CHANGES (LP: #1817750)
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors

Author: Thomas Ward
Author Date: 2019-02-26 16:15:07 UTC

Import patches-unapplied version 1.15.9-0ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: f3e5bd142893ea7b6945c2a7f561b67eac800fbc

New changelog entries:
  * New upstream release (1.15.9) - full changelog available from
    http://nginx.org/en/CHANGES (LP: #1817750)
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors

Author: Thomas Ward
Author Date: 2019-02-26 16:15:07 UTC

Import patches-applied version 1.15.9-0ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 52826b5336cd430f09c5dc6a9e46c07915dd73bd
Unapplied parent: 8dd3ca424ee676674c6f12f234296d40db210d9c

New changelog entries:
  * New upstream release (1.15.9) - full changelog available from
    http://nginx.org/en/CHANGES (LP: #1817750)
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.
    - d/rules: Enable --with-compat build option for all nginx package
      flavors

Author: Marc Deslauriers
Author Date: 2018-11-06 18:56:34 UTC

Import patches-unapplied version 1.4.6-1ubuntu3.9 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: e2d16210cefcf3c4fcc7098c3f089aba06c22c09

New changelog entries:
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:56:34 UTC

Import patches-applied version 1.4.6-1ubuntu3.9 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 264bf006f36688012836b8930530151e891b6c16
Unapplied parent: cffc0a236986833c5ab456691f09969769db766b

New changelog entries:
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:56:34 UTC

Import patches-applied version 1.4.6-1ubuntu3.9 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 264bf006f36688012836b8930530151e891b6c16
Unapplied parent: cffc0a236986833c5ab456691f09969769db766b

New changelog entries:
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:56:34 UTC

Import patches-applied version 1.4.6-1ubuntu3.9 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 264bf006f36688012836b8930530151e891b6c16
Unapplied parent: cffc0a236986833c5ab456691f09969769db766b

New changelog entries:
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:50:41 UTC

Import patches-unapplied version 1.15.5-0ubuntu2.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: fc67f8396fcf3779ced98047ffe73657658b5a91

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:50:41 UTC

Import patches-unapplied version 1.15.5-0ubuntu2.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: fc67f8396fcf3779ced98047ffe73657658b5a91

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:50:41 UTC

Import patches-applied version 1.15.5-0ubuntu2.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: c1c08e1791148bb81f1c0196000dde1a2c6d6fe6
Unapplied parent: 1e977da3325b801108ce0e737c554d41cdd66594

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:50:41 UTC

Import patches-applied version 1.15.5-0ubuntu2.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: c1c08e1791148bb81f1c0196000dde1a2c6d6fe6
Unapplied parent: 1e977da3325b801108ce0e737c554d41cdd66594

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:50:41 UTC

Import patches-unapplied version 1.15.5-0ubuntu2.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: fc67f8396fcf3779ced98047ffe73657658b5a91

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:56:34 UTC

Import patches-unapplied version 1.4.6-1ubuntu3.9 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: e2d16210cefcf3c4fcc7098c3f089aba06c22c09

New changelog entries:
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:50:41 UTC

Import patches-applied version 1.15.5-0ubuntu2.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: c1c08e1791148bb81f1c0196000dde1a2c6d6fe6
Unapplied parent: 1e977da3325b801108ce0e737c554d41cdd66594

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Marc Deslauriers
Author Date: 2018-11-06 18:56:34 UTC

Import patches-unapplied version 1.4.6-1ubuntu3.9 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: e2d16210cefcf3c4fcc7098c3f089aba06c22c09

New changelog entries:
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

Author: Thomas Ward
Author Date: 2018-10-26 19:25:59 UTC

Import patches-unapplied version 1.15.5-0ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: aa978fc9a7333737c7827b11d1952bc940b375d7

New changelog entries:
  * d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3 to
    the ssl_protocols line. (SRU, LP: #1800214)

Author: Thomas Ward
Author Date: 2018-10-26 19:25:59 UTC

Import patches-applied version 1.15.5-0ubuntu2 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b8dfe758809ea09976f465e51db1c12531085c8d
Unapplied parent: a6841328e226c39ec237cbaf8052a1dee1366c8b

New changelog entries:
  * d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3 to
    the ssl_protocols line. (SRU, LP: #1800214)

Author: Thomas Ward
Author Date: 2018-10-02 15:31:05 UTC

Import patches-unapplied version 1.15.5-0ubuntu1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: a5333787b185c9a200d907b09871bafd1208d323

New changelog entries:
  * This is a bugfixes-only upstream micro release, and thus is a bugfixes-
    only version change. (LP: #1795690)
  * New upstream release (1.15.5) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.

Author: Thomas Ward
Author Date: 2018-10-02 15:31:05 UTC

Import patches-applied version 1.15.5-0ubuntu1 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: c5ebdb90cfe88f6d1003f970580a4635c3080bac
Unapplied parent: b97c3fa6344da231094b3c80f3df60c3a38be704

New changelog entries:
  * This is a bugfixes-only upstream micro release, and thus is a bugfixes-
    only version change. (LP: #1795690)
  * New upstream release (1.15.5) - full changelog available from
    http://nginx.org/en/CHANGES
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.
    - d/nginx-{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.

Author: Thomas Ward
Author Date: 2018-04-17 16:17:58 UTC

Import patches-unapplied version 1.14.0-0ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: aeda8df039bdee2c510a25c20beacfd8e9862cdf

New changelog entries:
  * New upstream stable release (1.14.0)
  * Upstream changelogs can be found at http://nginx.org/en/CHANGES-1.14
  * There are no functional changes or new features in this release,
    and the only change is a version number change.
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.

Author: Thomas Ward
Author Date: 2018-04-17 16:17:58 UTC

Import patches-applied version 1.14.0-0ubuntu1 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 82cd8224ddd114887f83b536370bd305f429617b
Unapplied parent: b00125d2c236dee32554d8ee34348957de49a57f

New changelog entries:
  * New upstream stable release (1.14.0)
  * Upstream changelogs can be found at http://nginx.org/en/CHANGES-1.14
  * There are no functional changes or new features in this release,
    and the only change is a version number change.
  * Remaining Ubuntu-specific changes:
    - debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
    - d/{control,rules,nginx-core.*}: add new binary package for main,
      nginx-core, which contains only source-tarball-included modules
      and no third-party modules.
    - debian/tests/control: add nginx-core test.
    - debian/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - debian/nginx-common.install: Add install rule for apport hooks.

Author: Ubuntu Git Importer
Author Date: 2018-03-21 22:38:59 UTC

pristine-tar data for nginx_1.13.10.orig.tar.gz

Author: Ubuntu Git Importer
Author Date: 2018-03-07 15:51:02 UTC

pristine-tar data for nginx_1.13.6.orig.tar.gz

Author: ctrochalakis
Author Date: 2017-07-12 07:29:22 UTC

Import patches-applied version 1.6.2-5+deb8u5 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: a588ab11dfb1d03b9016ce182e0428fb82be6884
Unapplied parent: 1e4a12d0e50a8f9c41a08c959d1fab23b9f58885

New changelog entries:
  * Handle CVE-2017-7529 Integer overflow in the range filter (Closes: #868109)

Author: ctrochalakis
Author Date: 2017-07-12 07:29:22 UTC

Import patches-unapplied version 1.6.2-5+deb8u5 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 9317b0e81149eb41acb129acdd05a59cb157d46f

New changelog entries:
  * Handle CVE-2017-7529 Integer overflow in the range filter (Closes: #868109)

Author: Matthias Klose
Author Date: 2017-07-26 20:11:43 UTC

Import patches-unapplied version 1.12.1-0ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 02409ba71cfe8f9a2a6d4197f2907df51e148703

New changelog entries:
  * No-change rebuild for perl 5.26.0.

Author: Matthias Klose
Author Date: 2017-07-26 20:11:43 UTC

Import patches-applied version 1.12.1-0ubuntu2 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 71a136e2725d398561512c31f0befce5abf47884
Unapplied parent: a40f5202a099751d713091deefd52d53992cbc23

New changelog entries:
  * No-change rebuild for perl 5.26.0.

Author: Matthias Klose
Author Date: 2017-07-26 20:11:43 UTC

Import patches-applied version 1.12.1-0ubuntu2 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 71a136e2725d398561512c31f0befce5abf47884
Unapplied parent: a40f5202a099751d713091deefd52d53992cbc23

New changelog entries:
  * No-change rebuild for perl 5.26.0.

Author: Matthias Klose
Author Date: 2017-07-26 20:11:43 UTC

Import patches-unapplied version 1.12.1-0ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 02409ba71cfe8f9a2a6d4197f2907df51e148703

New changelog entries:
  * No-change rebuild for perl 5.26.0.

Author: Matthias Klose
Author Date: 2017-07-26 20:11:43 UTC

Import patches-unapplied version 1.12.1-0ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 02409ba71cfe8f9a2a6d4197f2907df51e148703

New changelog entries:
  * No-change rebuild for perl 5.26.0.

Author: Matthias Klose
Author Date: 2017-07-26 20:11:43 UTC

Import patches-applied version 1.12.1-0ubuntu2 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 71a136e2725d398561512c31f0befce5abf47884
Unapplied parent: a40f5202a099751d713091deefd52d53992cbc23

New changelog entries:
  * No-change rebuild for perl 5.26.0.

Author: Steve Beattie
Author Date: 2017-07-12 07:27:59 UTC

Import patches-applied version 1.10.3-1ubuntu3.1 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 0ada9ea728d44ddf723ecbc7f0a4e9fe7cbdbc31
Unapplied parent: 2521b7c4cf565443e9e1079055cb816f08317953

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 07:27:59 UTC

Import patches-unapplied version 1.10.3-1ubuntu3.1 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: b5ced53961ab41280cf0abd561a0da02c549d74f

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 07:27:59 UTC

Import patches-unapplied version 1.10.3-1ubuntu3.1 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: b5ced53961ab41280cf0abd561a0da02c549d74f

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 07:27:59 UTC

Import patches-applied version 1.10.3-1ubuntu3.1 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 0ada9ea728d44ddf723ecbc7f0a4e9fe7cbdbc31
Unapplied parent: 2521b7c4cf565443e9e1079055cb816f08317953

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 07:27:59 UTC

Import patches-applied version 1.10.3-1ubuntu3.1 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 0ada9ea728d44ddf723ecbc7f0a4e9fe7cbdbc31
Unapplied parent: 2521b7c4cf565443e9e1079055cb816f08317953

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 09:56:24 UTC

Import patches-unapplied version 1.10.1-0ubuntu1.3 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 11566cbf092f8ece359dc1b5efc26700f391487c

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 09:56:24 UTC

Import patches-applied version 1.10.1-0ubuntu1.3 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: cfe2366397c1b6e86f7ea2bf1c10762f51345b73
Unapplied parent: 4fec8558ade85a48539a22b62a02a0efc4e40523

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 09:56:24 UTC

Import patches-applied version 1.10.1-0ubuntu1.3 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: cfe2366397c1b6e86f7ea2bf1c10762f51345b73
Unapplied parent: 4fec8558ade85a48539a22b62a02a0efc4e40523

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 09:56:24 UTC

Import patches-unapplied version 1.10.1-0ubuntu1.3 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 11566cbf092f8ece359dc1b5efc26700f391487c

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Steve Beattie
Author Date: 2017-07-12 07:27:59 UTC

Import patches-unapplied version 1.10.3-1ubuntu3.1 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: b5ced53961ab41280cf0abd561a0da02c549d74f

New changelog entries:
  * SECURITY UPDATE: integer overflow in range filter leading to
    information exposure
    - debian/patches/CVE-2017-7529.patch: add check to ensure size does
      not overflow
    - CVE-2017-7529

Author: Thomas Ward
Author Date: 2017-02-11 21:18:21 UTC

Import patches-unapplied version 1.10.3-0ubuntu0.16.04.1 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: fc077fe7f833738f4f72f60a0b18a8559f7ebd97

New changelog entries:
  * Stable Release Update (LP: #1663937)
  * New upstream release (1.10.3) - full changelog available at upstream
    website - http://nginx.org/en/CHANGES-1.10
  * All Ubuntu specific changes from 1.10.0-0ubuntu1 through
    1.10.0-0ubuntu0.16.04.4 remain included.
  * Additional changes:
    * debian/patches/ubuntu-branding.patch: Refreshed Ubuntu Branding patch.
    * debian/patches/cve-2016-4450.patch: Drop CVE patch as it is already
      included in the upstream source code in this upload.

Author: Thomas Ward
Author Date: 2017-02-11 21:18:21 UTC

Import patches-applied version 1.10.3-0ubuntu0.16.04.1 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 9e1e0c87b0d6aee63aa1d0f4e58b256a5f55bdf7
Unapplied parent: c303933b42cee6a99ac2b46243b5463720aee6d3

New changelog entries:
  * Stable Release Update (LP: #1663937)
  * New upstream release (1.10.3) - full changelog available at upstream
    website - http://nginx.org/en/CHANGES-1.10
  * All Ubuntu specific changes from 1.10.0-0ubuntu1 through
    1.10.0-0ubuntu0.16.04.4 remain included.
  * Additional changes:
    * debian/patches/ubuntu-branding.patch: Refreshed Ubuntu Branding patch.
    * debian/patches/cve-2016-4450.patch: Drop CVE patch as it is already
      included in the upstream source code in this upload.