Ubuntu
nginx package

ubuntu/+source/nginx:applied/ubuntu/cosmic-security

  1. Git
  2. lp:ubuntu/+source/nginx
  3. applied/ubuntu/cosmic-security
Last commit made on 2018-11-07
Get this branch:
git clone -b applied/ubuntu/cosmic-security https://git.launchpad.net/ubuntu/+source/nginx
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/cosmic-security
Repository:
lp:ubuntu/+source/nginx

Recent commits

f9ee49f... by Marc Deslauriers on 2018-11-06

Import patches-applied version 1.15.5-0ubuntu2.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: c1c08e1791148bb81f1c0196000dde1a2c6d6fe6
Unapplied parent: 1e977da3325b801108ce0e737c554d41cdd66594

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

1e977da... by Marc Deslauriers on 2018-11-06

CVE-2018-16845.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2018-16845.patch.

3114475... by Marc Deslauriers on 2018-11-06

CVE-2018-16844.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2018-16844.patch.

e6f38cc... by Marc Deslauriers on 2018-11-06

CVE-2018-16843.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2018-16843.patch.

c82bf22... by Marc Deslauriers on 2018-11-06

Add Ubuntu token to NGINX_VER

Gbp-Pq: ubuntu-branding.patch.

0b89e53... by Marc Deslauriers on 2018-11-06

Use _GNU_SOURCE on GNU/kFreeBSD

Gbp-Pq: 0003-define_gnu_source-on-other-glibc-based-platforms.patch.

be0fb1f... by Marc Deslauriers on 2018-11-06

Make sure signature stays the same in all nginx builds

Gbp-Pq: 0002-Make-sure-signature-stays-the-same-in-all-nginx-buil.patch.

2e65540... by Marc Deslauriers on 2018-11-06

Import patches-unapplied version 1.15.5-0ubuntu2.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: fc67f8396fcf3779ced98047ffe73657658b5a91

New changelog entries:
  * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation
    - debian/patches/CVE-2018-16843.patch: add flood detection in
      src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16843
  * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation
    - debian/patches/CVE-2018-16844.patch: limit the number of idle state
      switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
    - CVE-2018-16844
  * SECURITY UPDATE: infinite loop in ngx_http_mp4_module
    - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in
      src/http/modules/ngx_http_mp4_module.c.
    - CVE-2018-16845

c1c08e1... by Thomas Ward on 2018-10-26

Import patches-applied version 1.15.5-0ubuntu2 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b8dfe758809ea09976f465e51db1c12531085c8d
Unapplied parent: a6841328e226c39ec237cbaf8052a1dee1366c8b

New changelog entries:
  * d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3 to
    the ssl_protocols line. (SRU, LP: #1800214)

fc67f83... by Thomas Ward on 2018-10-26

Import patches-unapplied version 1.15.5-0ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: aa978fc9a7333737c7827b11d1952bc940b375d7

New changelog entries:
  * d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3 to
    the ssl_protocols line. (SRU, LP: #1800214)