Ubuntu
nginx package

ubuntu/+source/nginx:applied/ubuntu/bionic-updates

  1. Git
  2. lp:ubuntu/+source/nginx
  3. applied/ubuntu/bionic-updates
Last commit made on 2018-11-07
Get this branch:
git clone -b applied/ubuntu/bionic-updates https://git.launchpad.net/ubuntu/+source/nginx
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/bionic-updates
Repository:
lp:ubuntu/+source/nginx

Recent commits

6c2e194... by Marc Deslauriers on 2018-11-06

Import patches-applied version 1.14.0-0ubuntu1.2 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 8362ff32c58b7ab21f2ef2e62b5a31779f51c046
Unapplied parent: dcc004053c7bc5e671c97c7aab7f1c780ae7086e

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

dcc0040... by Marc Deslauriers on 2018-11-06

CVE-2018-16845.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2018-16845.patch.

13d4ec4... by Marc Deslauriers on 2018-11-06

CVE-2018-16844.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2018-16844.patch.

a91ae00... by Marc Deslauriers on 2018-11-06

CVE-2018-16843.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2018-16843.patch.

9ce4dcb... by Marc Deslauriers on 2018-11-06

Add Ubuntu token to NGINX_VER

Gbp-Pq: ubuntu-branding.patch.

5725e7a... by Marc Deslauriers on 2018-11-06

Use _GNU_SOURCE on GNU/kFreeBSD

Gbp-Pq: 0003-define_gnu_source-on-other-glibc-based-platforms.patch.

dd33ccb... by Marc Deslauriers on 2018-11-06

Make sure signature stays the same in all nginx builds

Gbp-Pq: 0002-Make-sure-signature-stays-the-same-in-all-nginx-buil.patch.

5dbef63... by Marc Deslauriers on 2018-11-06

Import patches-unapplied version 1.14.0-0ubuntu1.2 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: d84643515ea4b92a3de14fae459352023db0b0b5

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

8362ff3... by Andres Rodriguez on 2018-08-20

Import patches-applied version 1.14.0-0ubuntu1.1 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 1a5d07ac01d950bff01a623dcda8a19a02b6c3e1
Unapplied parent: a0b0b9613f7c8840623467723a38c8d254501512

New changelog entries:
  * Stable Release Update. Do not attempt to start nginx if other daemon
    is binding to port 80, to prevent install failure (LP: #1782226):
    - d/nginx{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade.
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.

d846435... by Andres Rodriguez on 2018-08-20

Import patches-unapplied version 1.14.0-0ubuntu1.1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 2b287f4c2b15b0cb8eaf3e7d0d02d47d152073bd

New changelog entries:
  * Stable Release Update. Do not attempt to start nginx if other daemon
    is binding to port 80, to prevent install failure (LP: #1782226):
    - d/nginx{core,light,full,extras}.postinst: Add checks for whether
      port 80 is in use or not to determine whether or not to attempt
      starting of the NGINX service during install/upgrade.
    - d/control: Add dependencies to nginx-{core,light,full,extras} on
      `iproute2` as the postinst scripts now use `ss` to determine if
      Port 80 is open or not.