-
731cf7e...
by
Steve Beattie
on 2017-07-12
-
Import patches-unapplied version 1.10.1-0ubuntu1.3 to ubuntu/yakkety-security
Imported using git-ubuntu import.
Changelog parent: 11566cbf092f8ece359dc1b5efc26700f391487c
New changelog entries:
* SECURITY UPDATE: integer overflow in range filter leading to
information exposure
- debian/patches/CVE-2017-7529.patch: add check to ensure size does
not overflow
- CVE-2017-7529
-
11566cb...
by
Marc Deslauriers
on 2016-10-27
-
Import patches-unapplied version 1.10.1-0ubuntu1.2 to ubuntu/yakkety-security
Imported using git-ubuntu import.
Changelog parent: 496c76442af0b99cf8a27f6c987dd7a9803079fb
New changelog entries:
* SECURITY REGRESSION: postinst upgrade failure (LP: #1637058)
- debian/nginx-common.postinst: fix return code so script doesn't exit.
-
496c764...
by
Marc Deslauriers
on 2016-10-18
-
Import patches-unapplied version 1.10.1-0ubuntu1.1 to ubuntu/yakkety-security
Imported using git-ubuntu import.
Changelog parent: 2b7f042de0d73883a0fbf27e9c11368764da708c
New changelog entries:
[ Christos Trochalakis ]
* debian/nginx-common.postinst:
+ Secure log file handling (owner & permissions) against privilege
escalation attacks. /var/log/nginx is now owned by root:adm.
Thanks Dawid Golunski (http://legalhackers.com) for the report.
Changing /var/log/nginx permissions effectively reopens #701112,
since log files can be world-readable. This is a trade-off until
a better log opening solution is implemented upstream (trac:376).
* debian/control:
Don't allow building against liblua5.1-0-dev on architectures
that libluajit is available.
-
2b7f042...
by
Thomas Ward
on 2016-05-31
-
Import patches-unapplied version 1.10.1-0ubuntu1 to ubuntu/yakkety-proposed
Imported using git-ubuntu import.
Changelog parent: 5eb610cec1466bfea3b7e7276361aeb0330eb748
New changelog entries:
* New upstream release (1.10.1) - full changelog available at upstream
website - http://nginx.org/en/CHANGES-1.10.
* Update done to address the following security issues:
- [CVE-2016-4450] NULL pointer dereference while writing client
request body. (LP: #1587577)
* Additional changes:
* debian/patches/ubuntu-branding.patch: Refreshed Ubuntu Branding patch.
-
5eb610c...
by
Thomas Ward
on 2016-04-26
-
Import patches-unapplied version 1.10.0-0ubuntu1 to ubuntu/yakkety-proposed
Imported using git-ubuntu import.
Changelog parent: b100a2e83b3b938552e58fbedca71db098fb1cf0
New changelog entries:
* New upstream release (1.10.0) - full changelog available at upstream
website - http://nginx.org/en/CHANGES-1.10 (LP: #1575217)
* All Ubuntu specific changes from 1.9.15-0ubuntu1 remain included.
* Additional changes:
* debian/patches/ubuntu-branding.patch: Refreshed Ubuntu Branding patch.
-
b100a2e...
by
Thomas Ward
on 2016-04-18
-
Import patches-unapplied version 1.9.15-0ubuntu1 to ubuntu/xenial-proposed
Imported using git-ubuntu import.
Changelog parent: 305f0eaded9556098a8259dea8c55d17951adc5f
New changelog entries:
* New upstream release (1.9.15) - full changelog available at upstream
website - http://nginx.org/en/CHANGES (LP: #1572223)
* All Ubuntu specific changes from 1.1.14-0ubuntu1, except noted below,
remain included in this upload.
* Remaining changes:
* debian/control: Re-add libluajit-5.1-dev build-dependency, as it will
only affect nginx-extras which is in Universe. This reduces the merge
delta between Ubuntu and Debian slightly, as well. (LP: #1571444)
* debian/patches/ubuntu-branding.patch: Refresh Ubuntu Branding patch.
-
305f0ea...
by
Thomas Ward
on 2016-04-01
-
Import patches-unapplied version 1.9.14-0ubuntu1 to ubuntu/xenial-proposed
Imported using git-ubuntu import.
Changelog parent: 65b6f3e0006bd3a47c38c9675e46d24a11de9b96
New changelog entries:
* New upstream release (1.9.14) - full changelog available at upstream
website - htp://nginx.org/en/CHANGES (LP: #1566392)
* All Ubuntu specific changes from 1.9.13-0ubuntu1, except noted below,
remain included in this upload.
* Remaining changes:
* Enable HTTP/2 module for nginx-full, nginx-extras, and nginx-core
(LP: #1565043)
- debian/rules: Enable HTTP/2 module building in flavor rules
- debian/control: Add HTTP/2 module to package descriptions.
* debian/patches/ubuntu-branding.patch: Refresh Ubuntu Branding patch.
-
65b6f3e...
by
Thomas Ward
on 2016-03-29
-
Import patches-unapplied version 1.9.13-0ubuntu1 to ubuntu/xenial-proposed
Imported using git-ubuntu import.
Changelog parent: db73e5de28439198354f767e312f29f05b61442e
New changelog entries:
* New upstream release (1.9.13) - full changelog available at upstream
website - http://nginx.org/en/CHANGES (LP: #1563393)
* All Ubuntu specific changes from 1.9.12-0ubuntu1 remain included in
this upload.
* debian/patches/ubuntu-branding.patch: Refresh Ubuntu Branding patch.
-
db73e5d...
by
Thomas Ward
on 2016-02-24
-
Import patches-unapplied version 1.9.12-0ubuntu1 to ubuntu/xenial-proposed
Imported using git-ubuntu import.
Changelog parent: 1705dc8ee5fc413d15553125e0772c3931d4a7bb
New changelog entries:
* New upstream release (1.9.12) - full changelog available at upstream
website - http://nginx.org/en/CHANGES (LP: #1549347)
* All Ubuntu specific changes from 1.9.11-0ubuntu1 and -0ubuntu2 remain
included in this upload.
-
1705dc8...
by
Thomas Ward
on 2016-02-19
-
Import patches-unapplied version 1.9.11-0ubuntu2 to ubuntu/xenial-proposed
Imported using git-ubuntu import.
Changelog parent: 2cddb0a9f26926a18bb319a333451e9ff6b064bd
New changelog entries:
* This is a bug-fix only upload and does not include any new changes to
features.
* debian/conf/sites-available/default: Modify PHP 'default example' settings
to account for php5 being replaced with php7.0 in Xenial. Also adapt the
UNIX socket path for php7.0-fpm to be the one used by default in Xenial.
(LP: #1547642)
