-
66add36...
by
Marc Deslauriers
on 2020-01-10
-
Import patches-unapplied version 1.15.9-0ubuntu1.2 to ubuntu/disco-security
Imported using git-ubuntu import.
Changelog parent: a2a00253ec9a2fa346ddddfdcb5a7306b4f8e461
New changelog entries:
* SECURITY UPDATE: request smuggling via error_page
- debian/patches/CVE-2019-20372.patch: discard request body when
redirecting to a URL via error_page in
src/http/ngx_http_special_response.c.
- CVE-2019-20372
-
a2a0025...
by
Marc Deslauriers
on 2019-08-14
-
Import patches-unapplied version 1.15.9-0ubuntu1.1 to ubuntu/disco-security
Imported using git-ubuntu import.
Changelog parent: 1a9f5e9d7546052fdfa7d36e252853a6ce46e856
New changelog entries:
* SECURITY UPDATE: HTTP/2 Data Dribble issue
- debian/patches/CVE-2019-9511.patch: limited number of DATA frames in
src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h,
src/http/v2/ngx_http_v2_filter_module.c.
- CVE-2019-9511
* SECURITY UPDATE: HTTP/2 Resource Loop / Priority Shuffling issue
- debian/patches/CVE-2019-9513.patch: limited number of PRIORITY frames
in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h.
- CVE-2019-9513
* SECURITY UPDATE: HTTP/2 0-Length Headers Leak issue
- debian/patches/CVE-2019-9516.patch: reject zero length headers with
PROTOCOL_ERROR in src/http/v2/ngx_http_v2.c.
- CVE-2019-9516
-
1a9f5e9...
by
Thomas Ward
on 2019-02-26
-
Import patches-unapplied version 1.15.9-0ubuntu1 to ubuntu/disco-proposed
Imported using git-ubuntu import.
Changelog parent: f3e5bd142893ea7b6945c2a7f561b67eac800fbc
New changelog entries:
* New upstream release (1.15.9) - full changelog available from
http://nginx.org/en/CHANGES (LP: #1817750)
* Remaining Ubuntu-specific changes:
- debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
- d/{control,rules,nginx-core.*}: add new binary package for main,
nginx-core, which contains only source-tarball-included modules
and no third-party modules.
- debian/tests/control: add nginx-core test.
- debian/apport/source_nginx.py: Add apport hooks for additional bug
information gathering.
- debian/nginx-common.install: Add install rule for apport hooks.
- d/nginx-{core,light,full,extras}.postinst: Add checks for whether
port 80 is in use or not to determine whether or not to attempt
starting of the NGINX service during install/upgrade
- d/control: Add dependencies to nginx-{core,light,full,extras} on
`iproute2` as the postinst scripts now use `ss` to determine if
Port 80 is open or not.
- d/rules: Enable --with-compat build option for all nginx package
flavors
-
f3e5bd1...
by
Thomas Ward
on 2019-02-02
-
Import patches-unapplied version 1.15.8-0ubuntu1 to ubuntu/disco-proposed
Imported using git-ubuntu import.
Changelog parent: ab150b127f4e45568cc516337ab8ace4070c6915
New changelog entries:
* New upstream release (1.15.8) - full changelog available from
http://nginx.org/en/CHANGES
* Remaining Ubuntu-specific changes:
- debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
- d/{control,rules,nginx-core.*}: add new binary package for main,
nginx-core, which contains only source-tarball-included modules
and no third-party modules.
- debian/tests/control: add nginx-core test.
- debian/apport/source_nginx.py: Add apport hooks for additional bug
information gathering.
- debian/nginx-common.install: Add install rule for apport hooks.
- d/nginx-{core,light,full,extras}.postinst: Add checks for whether
port 80 is in use or not to determine whether or not to attempt
starting of the NGINX service during install/upgrade
- d/control: Add dependencies to nginx-{core,light,full,extras} on
`iproute2` as the postinst scripts now use `ss` to determine if
Port 80 is open or not.
- d/rules: Enable --with-compat build option for all nginx package
flavors
-
ab150b1...
by
Thomas Ward
on 2018-11-27
-
Import patches-unapplied version 1.15.7-0ubuntu1 to ubuntu/disco-proposed
Imported using git-ubuntu import.
Changelog parent: 33b0ea2899c3194eb07457a7710ef9c734960126
New changelog entries:
* New upstream release (1.15.7) - full changelog available from
http://nginx.org/en/CHANGES
* Remaining Ubuntu-specific changes:
- debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
- d/{control,rules,nginx-core.*}: add new binary package for main,
nginx-core, which contains only source-tarball-included modules
and no third-party modules.
- debian/tests/control: add nginx-core test.
- debian/apport/source_nginx.py: Add apport hooks for additional bug
information gathering.
- debian/nginx-common.install: Add install rule for apport hooks.
- d/nginx-{core,light,full,extras}.postinst: Add checks for whether
port 80 is in use or not to determine whether or not to attempt
starting of the NGINX service during install/upgrade
- d/control: Add dependencies to nginx-{core,light,full,extras} on
`iproute2` as the postinst scripts now use `ss` to determine if
Port 80 is open or not.
- d/rules: Enable --with-compat build option for all nginx package
flavors (LP: #1797897)
-
33b0ea2...
by
Thomas Ward
on 2018-11-23
-
Import patches-unapplied version 1.15.6-0ubuntu2 to ubuntu/disco-proposed
Imported using git-ubuntu import.
Changelog parent: 88d99a1d3923ddb1de2d1f6f727e4bf7dd760f70
New changelog entries:
* Apply a Debian packaging change to Ubuntu package for config parity:
* d/conf/snippets/fastcgi-php.conf: Adjust fastcgi_split_path_info
snippet to handle the /example.php/ case. (Debian bug 911398)
-
88d99a1...
by
Thomas Ward
on 2018-11-13
-
Import patches-unapplied version 1.15.6-0ubuntu1 to ubuntu/disco-proposed
Imported using git-ubuntu import.
Changelog parent: 7f16ea562216cb8ae1d59fea540c272897acf314
New changelog entries:
* New upstream release (1.15.6) - full changelog available from
http://nginx.org/en/CHANGES
* Remaining Ubuntu-specific changes:
- debian/patches/ubuntu-branding.patch: add Ubuntu branding (refreshed)
- d/{control,rules,nginx-core.*}: add new binary package for main,
nginx-core, which contains only source-tarball-included modules
and no third-party modules.
- debian/tests/control: add nginx-core test.
- debian/apport/source_nginx.py: Add apport hooks for additional bug
information gathering.
- debian/nginx-common.install: Add install rule for apport hooks.
- d/nginx-{core,light,full,extras}.postinst: Add checks for whether
port 80 is in use or not to determine whether or not to attempt
starting of the NGINX service during install/upgrade
- d/control: Add dependencies to nginx-{core,light,full,extras} on
`iproute2` as the postinst scripts now use `ss` to determine if
Port 80 is open or not.
- d/rules: Enable --with-compat build option for all nginx package
flavors (LP: #1797897)
-
7f16ea5...
by
Steve Langasek
on 2018-11-12
-
Import patches-unapplied version 1.15.5-0ubuntu4 to ubuntu/disco-proposed
Imported using git-ubuntu import.
Changelog parent: 2599fd178880d040d899f8d7f5abcb0458165391
New changelog entries:
* No-change rebuild against libhiredis0.14
-
2599fd1...
by
Adam Conrad
on 2018-11-03
-
Import patches-unapplied version 1.15.5-0ubuntu3 to ubuntu/disco-proposed
Imported using git-ubuntu import.
Changelog parent: fc67f8396fcf3779ced98047ffe73657658b5a91
New changelog entries:
* No-change rebuild for the perl 5.28 transition.
-
fc67f83...
by
Thomas Ward
on 2018-10-26
-
Import patches-unapplied version 1.15.5-0ubuntu2 to ubuntu/cosmic-proposed
Imported using git-ubuntu import.
Changelog parent: aa978fc9a7333737c7827b11d1952bc940b375d7
New changelog entries:
* d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3 to
the ssl_protocols line. (SRU, LP: #1800214)
