~ubuntu-branches/ubuntu/precise/nginx/precise-security : changes

~ubuntu-branches/ubuntu/precise/nginx/precise-security » Changes from revision 56

From Revision 56 to 37

Rev	Summary	Authors	Tags	Date
56	* SECURITY UPDATE: incorrect cached SSL session reuse (LP: #... * SECURITY UPDATE: incorrect cached SSL session reuse (LP: #1370478) - debian/patches/CVE-2014-3616.patch: Use a random value for session id context, since there is no support for shared TLS Session Tickets in this version in src/event/ngx_event_openssl.c. - CVE-2014-3616	Lev Lazinskiy	1.1.19-1ubuntu0.7	9 years ago
55	* SECURITY UPDATE: ACL bypass via space character (LP: #1253... * SECURITY UPDATE: ACL bypass via space character (LP: #1253691) - debian/patches/cve-2013-4547.patch: modify src/http/ngx_http_parse.c to account for a space character, fixing an issue which could result in security restrictions being bypassed - CVE-2013-4547	Thomas Ward	1.1.19-1ubuntu0.5	10 years ago
54	* Security update (closes LP: #1182586): * Security update (closes LP: #1182586): * Patch to fix a buffer overflow vulnerability (CVE-2013-2070)	Thomas Ward	1.1.19-1ubuntu0.2	10 years ago
53	[Cyril Lavier] [Cyril Lavier] * New upstream release. + Fixed a buffer overflow in the ngx_http_mp4_module. See: CVE-2012-2089 for more details. * debian/copyright: + Updated licenses. * debian/nginx-extras.postinst, debian/nginx-full.postinst, debian/nginx-light.postinst, debian/nginx-naxsi.postinst: + Removing the debug markers. (Closes: #667894) * debian/control, debian/rules, debian/copyright, debian/modules/nginx-dav-ext-module: + Added nginx-dav-ext-module in full and extras. * debian/modules/naxsi: + Updated naxsi to the SVN snapshot (r280) to fix the licence issue with OpenSSL. [Kartik Mistry] * Misc cleanups in debian/control, debian/copyright.	Cyril Lavier	1.1.19-1	12 years ago
52	[Cyril Lavier] [Cyril Lavier] * debian/control: + Added build dependency to dpkg-dev (>= 1.15.7). (Closes: #664212) * debian/patches/perl-use-dpkg-buildflags.patch: + Added patch to harden flags for perl module (Thanks to Simon Ruderich for the patch). (Closes: #664090) [Kartik Mistry] * Set urgency due to fix for security and RC bugs with 1.17.1-1 upload.	Cyril Lavier	1.1.17-2	12 years ago
51	[Cyril Lavier] [Cyril Lavier] * New upstream release. * debian/rules: + Resolved the lintian errors "unstripped-binary-or-object" with a cleaner correction (Thanks to Steven Chamberlain for the patch). + Added a check on the parallel building to force NUMJOBS to 1 if the value 0 is given. * debian/modules: + Updated nginx-lua module to version 0.4.1. [Kartik Mistry] * debian/rules, debian/control, debian/copyright, debian/modules/nginx-upload-module: + Added Upload module to nginx-extras, updated long description and copyright. (Closes: #654593) * debian/modules/README.modules: + Added Homepage information for some modules. * debian/rules: + Enable hardened build flags, Thanks to Moritz Muehlenhoff for patch. (Closes: #658186)	Kartik Mistry	1.1.14-1	12 years ago
50	[Kartik Mistry] [Kartik Mistry] * debian/control: + Set myself as Maintainer, Jose Parrella as Uploaders with approval from team. * debian/copyright: + Fixed DEP5 URL. + Updated debian/* copyright. * debian/modules: + Updated nginx-lua module to version 0.3.1rc43 [Cyril Lavier] * New upstream release. * debian/conf/sites-available/default: + Added a / in the alias directive. (Closes: #653160) * debian/rules: + Added necessary lines for parallel building.	Kartik Mistry	1.1.12-1	12 years ago
49	[Kartik Mistry] [Kartik Mistry] * New upstream release. * debian/control: + Set priority to extra for nginx-light and nginx-extras binaries (Policy: Section 2.5) * debian/patches/607418-ipv6-addresses.diff: + Removed. Merged upstream with 1.1.9 release. * debian/copyright: + Updated upstream copyright year, updated Michael's email address, misc changes for format. [Michael Lustfield] * debian/conf/fastcgi_params: + Changed $server_https to $https per new feature in 1.1.11. * debian/conf/nginx.conf: + Removed map for $server_https as it's no longer needed.	Kartik Mistry	1.1.11-1	12 years ago
48	* debian/modules/chunkin-nginx-module: * debian/modules/chunkin-nginx-module: + Reinclude HttpChunkin Module with new upstream version (closes: #638814) * debian/control: + Add myself to uploaders list.	Dmitry E. Oboukhov	1.1.8-2	12 years ago
47	[Kartik Mistry] [Kartik Mistry] * New upstream release. * debian/modules/chunkin-nginx-module: + Removed as of now, as it breaks with Perl 5.14 (Closes: #649061) [Michael Lustfield] * debian/control: + Added Map module to nginx-light modules list. * debian/rules: + Removed --without-http_map_module form nginx-light. * debian/nginx-common.install: + Changed ufw profile installation (LP: #825349). - debian/ufw.profile -> debian/ufw/nginx. * debian/nginx-common.preinst: + Cleanup of moved nginx profile. * debian/conf/nginx.conf: + Added a default map for $server_https (on\|off). * debian/conf/fastcgi_params: + Pass HTTPS so $_SERVER['HTTPS'] is set (LP: #857831). * debian/conf/mime.types: + Added json type (LP: #883440). * debian/conf/sites-available/default: + Added notes about PHP (Closes: #642995). + Changed location /doc from root to alias. + Changed location /doc to /doc/ for people that don't bother reading or learning anything about Nginx configuration files (LP: #840358).	Kartik Mistry	1.1.8-1	12 years ago
46	Rebuild for Perl 5.14. Rebuild for Perl 5.14.	Colin Watson	1.1.4-2build1	12 years ago
45	[Kartik Mistry] [Kartik Mistry] * debian/modules: + Updated nginx-upload-progress module, Thanks to upstream for fixing issue that FTBFS nginx on kFreeBSD-* archs. + Updated nginx-lua module to latest upstream.	Kartik Mistry	1.1.4-2	12 years ago
44	* New upstream release * New upstream release * debian/control: + nginx Depends on either nginx-full or nginx-light, Thanks to Hans van Kranenburg <hans.van.kranenburg@mendix.com> (Closes: #633879) * debian/copyright: + Updated to latest DEP-5 specification + Added some missing copyrights for modules + Updated copyright years	Kartik Mistry	1.0.5-1	12 years ago
43	* New upstream release * New upstream release * debian/*.lintian-overrides, debian/rules: + Removed unused lintian for missing manpages	Kartik Mistry	1.0.4-1	12 years ago
42	* New upstream release * New upstream release * debian/rules: + Removed if surrounding copy of man/ as it is required for builds. + Added nginx-upload-progress to nginx-extras. (Closes: #618306) + Added nginx-secure-downloads to nginx-extras. (Closes: #622268) + Added --prefix to configure command. (Closes: #619482) * debian/modules: + Added nginx-upload-progress/. + Added nginx-secure-download/. + Updated nginx-lua/. + Updated versions. debian/control: + Added libmhash-dev build dependency. + Updated Standards-Version to 3.9.1.	Michael Lustfield	1.0.1-1	13 years ago
41	Rebuild for Perl 5.12. Rebuild for Perl 5.12.	Colin Watson	1.0.0-2build1	13 years ago
40	* debian/rules: * debian/rules: + Removed --with-file-aio support. Fixed FTBFS on kFreeBSD-* arch (Closes: #621882)	Kartik Mistry	1.0.0-2	13 years ago
39	[Micheal Lustfield] [Micheal Lustfield] * debian/nginx-{full,light,extras}.default: + Added comment about alternative to ULIMIT. * debian/nginx-{full,light,extras}.init.d: + Added quotes around a test variable. (Closes: #610946, LP: #699736) * debian/patches/609343-log-time-iso8601.diff: + Added patch to add $time_iso8601 variable to logs. (Closes: #609343) * Clean up old logrotate files. (Closes: #608983, Closes: #610289) + Added Files: - debian/nginx-common.preinst + Modified Files: - debian/rules + Moved debian/nginx-common.logrotate to debian/logrotate. * Added common files to nginx-common package. (Closes: #610290) + Removed Files: - debian/nginx-full.dirs - debian/nginx-light.dirs - debian/nginx-full.install - debian/nginx-light.install - debian/nginx-extras.install - debian/nginx.* + Added Files: - debian/nginx-common.default - debian/nginx-common.dirs - debian/nginx-common.init.d - debian/nginx-common.install - debian/nginx-common.manpages - debian/logrotate + Modified Files: - debian/nginx-extras.dirs - debian/control - debian/rules * debian/nginx-.install: (Closes: #609797) + Removed NEWS.Debian from nginx-{full,light,extras}.install. + Added NEWS.Debian to nginx-common.install. nginx-common.postinst: + Enforce /var/log/nginx mode and user:group. (Closes: #610983) + Enforce /var/log/nginx/.log mode and user:group. (Closes: #612832) debian/rules: + Added --with-file-aio to nginx-extras. (Closes: #613175) + Removed split clients and user id modules from nginx-light. * debian/conf/sites-available/default: + Fixed a minor typo ( s/Quickstart/QuickStart/ ). (Closes: #613355) * debian/conf/mime.types: + Changed xml type to application/xhtml+xml. (Closes: #613851) * debian/help/docs/fcgiwrap: + Removed Ubuntu specific line in docs. (Closes: #614987) * debian/conf/sites-available/default: + Fixed a pointer to a file. (Closes: #614980) [Kartik Mistry] * debian/*.lintian-overrides: + Add Lintian overrides for nginx man page. We've manpage in nginx-common binary	Michael Lustfield	0.8.54-4	13 years ago
38	[Kartik Mistry] [Kartik Mistry] * debian/conf/mime.types: + Added html5 codecs support (Closes: #605212) * debian/conf/fastcgi_params: + Fixed typo (Closes: #605582) [Michael Lustfield] * debian/conf/nginx.conf: + Reduced worker_connections to 768 (Closes: #605529) * Add an nginx site management script to nginx-doc. (Closes: #593580) + debian/help/examples/nginx_modsite: Added. * debian/nginx.logrotate: + Added prerotate chunk for awstats. (Closes: #590098) * debian/copyright: + Added Michael Lustfield * Created nginx-doc: + Added 'Package: nginx-doc' section to debian/control + Moved debian/nginx.examples -> debian/nginx-doc.examples + Moved debian/nginx.docs -> debian/nginx-doc.docs	Kartik Mistry	0.8.53-2	13 years ago
37	* Drop all Ubuntu changes that have landed in Debian in 0.8.... * Drop all Ubuntu changes that have landed in Debian in 0.8.53-1, except for: - debian/patches/nginx-html5-codecs.diff: Add support for html5 codecs.	Bilal Akhtar	0.8.53-1ubuntu2	13 years ago

Older »