-
f9ee49f...
by
Marc Deslauriers
on 2018-11-06
-
Import patches-applied version 1.15.5-0ubuntu2.1 to applied/ubuntu/cosmic-security
Imported using git-ubuntu import.
Changelog parent: c1c08e1791148bb81f1c0196000dde1a2c6d6fe6
Unapplied parent: 1e977da3325b801108ce0e737c554d41cdd66594
New changelog entries:
* SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
- debian/patches/CVE-2018-16843.patch: add flood detection in
src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
- CVE-2018-16843
* SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
- debian/patches/CVE-2018-16844.patch: limit the number of idle state
switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
- CVE-2018-16844
* SECURITY UPDATE: infinite loop in ngx_http_mp4_module
- debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
src/http/modules/ngx_http_mp4_module.c.
- CVE-2018-16845
-
1e977da...
by
Marc Deslauriers
on 2018-11-06
-
CVE-2018-16845.patch
No DEP3 Subject or Description header found
Gbp-Pq: CVE-2018-16845.patch.
-
3114475...
by
Marc Deslauriers
on 2018-11-06
-
CVE-2018-16844.patch
No DEP3 Subject or Description header found
Gbp-Pq: CVE-2018-16844.patch.
-
e6f38cc...
by
Marc Deslauriers
on 2018-11-06
-
CVE-2018-16843.patch
No DEP3 Subject or Description header found
Gbp-Pq: CVE-2018-16843.patch.
-
c82bf22...
by
Marc Deslauriers
on 2018-11-06
-
Add Ubuntu token to NGINX_VER
Gbp-Pq: ubuntu-branding.patch.
-
0b89e53...
by
Marc Deslauriers
on 2018-11-06
-
Use _GNU_SOURCE on GNU/kFreeBSD
Gbp-Pq: 0003-define_gnu_source-on-other-glibc-based-platforms.patch.
-
be0fb1f...
by
Marc Deslauriers
on 2018-11-06
-
Make sure signature stays the same in all nginx builds
Gbp-Pq: 0002-Make-sure-signature-stays-the-same-in-all-nginx-buil.patch.
-
2e65540...
by
Marc Deslauriers
on 2018-11-06
-
Import patches-unapplied version 1.15.5-0ubuntu2.1 to ubuntu/cosmic-security
Imported using git-ubuntu import.
Changelog parent: fc67f8396fcf3779ced98047ffe73657658b5a91
New changelog entries:
* SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
- debian/patches/CVE-2018-16843.patch: add flood detection in
src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
- CVE-2018-16843
* SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
- debian/patches/CVE-2018-16844.patch: limit the number of idle state
switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
- CVE-2018-16844
* SECURITY UPDATE: infinite loop in ngx_http_mp4_module
- debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
src/http/modules/ngx_http_mp4_module.c.
- CVE-2018-16845
-
c1c08e1...
by
Thomas Ward
on 2018-10-26
-
Import patches-applied version 1.15.5-0ubuntu2 to applied/ubuntu/cosmic-proposed
Imported using git-ubuntu import.
Changelog parent: b8dfe758809ea09976f465e51db1c12531085c8d
Unapplied parent: a6841328e226c39ec237cbaf8052a1dee1366c8b
New changelog entries:
* d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3 to
the ssl_protocols line. (SRU, LP: #1800214)
-
fc67f83...
by
Thomas Ward
on 2018-10-26
-
Import patches-unapplied version 1.15.5-0ubuntu2 to ubuntu/cosmic-proposed
Imported using git-ubuntu import.
Changelog parent: aa978fc9a7333737c7827b11d1952bc940b375d7
New changelog entries:
* d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3 to
the ssl_protocols line. (SRU, LP: #1800214)