~ubuntu-branches/ubuntu/quantal/nginx/quantal-security : changes

~ubuntu-branches/ubuntu/quantal/nginx/quantal-security » Changes from revision 58

From Revision 58 to 39

Rev	Summary	Authors	Tags	Date
58	* SECURITY UPDATE: ACL bypass via space character (LP: #1253... * SECURITY UPDATE: ACL bypass via space character (LP: #1253691) - debian/patches/cve-2013-4547.patch: modify src/http/ngx_http_parse.c to account for a space character, fixing an issue which could result in security restrictions being bypassed - CVE-2013-4547	Thomas Ward	1.2.1-2.2ubuntu0.2	10 years ago
57	* Security update (closes LP: #1182586): * Security update (closes LP: #1182586): * Patch to fix a buffer overflow vulnerability (CVE-2013-2070)	Thomas Ward	1.2.1-2.2ubuntu0.1	10 years ago
56	* Non-maintainer upload. * Non-maintainer upload. * Fix "removes files that were installed by another package": don't remove directories that are owned by (and removed from) nginx-common from nginx-extras.postrm. This seems to have been the idea in commit e30a854 ("Moved configuration purging to nginx-common.") except that it was added in nginx-common.postrm without being removed in nginx-extras.postrm. Remove nginx-extras.postrm since it's empty after this change. (Closes: #681758)	gregor herrmann	1.2.1-2.2	11 years ago
55	[Cyril Lavier] [Cyril Lavier] * Urgency set to medium, security bug in naxsi module, fix via upstream. * debian/modules/naxsi: + Updated naxsi module to version 0.46-1 fixing the following security issue : potential file disclosure in nx_extract.	Cyril Lavier	1.2.1-2	11 years ago
54	[Cyril Lavier] [Cyril Lavier] * New upstream release. (Closes: #670306) + 1.2.x is stable release now. * debian/modules/chunkin-nginx-module: + Updated chunkin-nginx-module to v0.23rc2-3-g85eca98. * debian/modules/headers-more-module: + Updated headers-more-module to v0.17rc1-4-g33a82ed. * debian/modules/nginx-development-kit: + Updated nginx-development-kit to v0.2.17-7-g24202b4. * debian/modules/nginx-echo: + Updated nginx-echo to v0.38rc2-7-g080c0a1. * debian/modules/nginx-lua: + Updated nginx-lua to v0.5.0rc25-5-g8d28785. * debian/modules/nginx-upstream-fair: + Updated nginx-upstream-fair to a18b409. * debian/modules/nginx-upload-progress: + Updated nginx-upload-progress to v0.9.0-0-ga788dea. * debian/modules/naxsi: + Updated naxsi to 0.46 * debian/modules/README.Modules-versions: + Updated versions and URLs for modules. * debian/naxsi-ui-extract, debian/naxsi-ui-intercept, debian/nginx-naxsi-ui., debian/naxsi-ui-extract.1, debian/naxsi-ui-intercept.1, debian/rules: + Added nginx-naxsi-ui package containing the learning daemon and the WebUI. debian/nginx-common.nginx.default, debian/nginx-common.nginx.init: + Renamed files to be compliant with the nginx-naxsi-ui package. * debian/po: + Added needed files for using po-debconf. + Added French translation. * debian/control: + Applied the modifications given after the review by Justin Rye. [Michael Lustfield] * debian/conf/uwsgi_params: + Added UWSGI_SCHEME to uwsgi_params. (Closes: #664878) * debian/conf/sites-available/default: + Added allow directive for ipv6 localhost. (Closes: #664271) [Kartik Mistry] * debian/control: + wrap-and-sort. * debian/copyright: + Added missing copyrights, minor formatting fixes. * debian/nginx-common.nginx.init: + Added ulimit for restarts, Thanks to Daniel Roschka <danielroschka@phoenitydawn.de> for patch. (Closes: #673580) * debian/conf/sites-available/default: + Added patch to fix deprecated "listen" directive, Thanks to Guillaume Plessis <gui@dotdeb.org> for patch. (Closes: #672632)	Kartik Mistry	1.2.0-1	11 years ago
53	[Cyril Lavier] [Cyril Lavier] * New upstream release. + Fixed a buffer overflow in the ngx_http_mp4_module. See: CVE-2012-2089 for more details. * debian/copyright: + Updated licenses. * debian/nginx-extras.postinst, debian/nginx-full.postinst, debian/nginx-light.postinst, debian/nginx-naxsi.postinst: + Removing the debug markers. (Closes: #667894) * debian/control, debian/rules, debian/copyright, debian/modules/nginx-dav-ext-module: + Added nginx-dav-ext-module in full and extras. * debian/modules/naxsi: + Updated naxsi to the SVN snapshot (r280) to fix the licence issue with OpenSSL. [Kartik Mistry] * Misc cleanups in debian/control, debian/copyright.	Cyril Lavier	1.1.19-1	12 years ago
52	[Cyril Lavier] [Cyril Lavier] * debian/control: + Added build dependency to dpkg-dev (>= 1.15.7). (Closes: #664212) * debian/patches/perl-use-dpkg-buildflags.patch: + Added patch to harden flags for perl module (Thanks to Simon Ruderich for the patch). (Closes: #664090) [Kartik Mistry] * Set urgency due to fix for security and RC bugs with 1.17.1-1 upload.	Cyril Lavier	1.1.17-2	12 years ago
51	[Cyril Lavier] [Cyril Lavier] * New upstream release. * debian/rules: + Resolved the lintian errors "unstripped-binary-or-object" with a cleaner correction (Thanks to Steven Chamberlain for the patch). + Added a check on the parallel building to force NUMJOBS to 1 if the value 0 is given. * debian/modules: + Updated nginx-lua module to version 0.4.1. [Kartik Mistry] * debian/rules, debian/control, debian/copyright, debian/modules/nginx-upload-module: + Added Upload module to nginx-extras, updated long description and copyright. (Closes: #654593) * debian/modules/README.modules: + Added Homepage information for some modules. * debian/rules: + Enable hardened build flags, Thanks to Moritz Muehlenhoff for patch. (Closes: #658186)	Kartik Mistry	1.1.14-1	12 years ago
50	[Kartik Mistry] [Kartik Mistry] * debian/control: + Set myself as Maintainer, Jose Parrella as Uploaders with approval from team. * debian/copyright: + Fixed DEP5 URL. + Updated debian/* copyright. * debian/modules: + Updated nginx-lua module to version 0.3.1rc43 [Cyril Lavier] * New upstream release. * debian/conf/sites-available/default: + Added a / in the alias directive. (Closes: #653160) * debian/rules: + Added necessary lines for parallel building.	Kartik Mistry	1.1.12-1	12 years ago
49	[Kartik Mistry] [Kartik Mistry] * New upstream release. * debian/control: + Set priority to extra for nginx-light and nginx-extras binaries (Policy: Section 2.5) * debian/patches/607418-ipv6-addresses.diff: + Removed. Merged upstream with 1.1.9 release. * debian/copyright: + Updated upstream copyright year, updated Michael's email address, misc changes for format. [Michael Lustfield] * debian/conf/fastcgi_params: + Changed $server_https to $https per new feature in 1.1.11. * debian/conf/nginx.conf: + Removed map for $server_https as it's no longer needed.	Kartik Mistry	1.1.11-1	12 years ago
48	* debian/modules/chunkin-nginx-module: * debian/modules/chunkin-nginx-module: + Reinclude HttpChunkin Module with new upstream version (closes: #638814) * debian/control: + Add myself to uploaders list.	Dmitry E. Oboukhov	1.1.8-2	12 years ago
47	[Kartik Mistry] [Kartik Mistry] * New upstream release. * debian/modules/chunkin-nginx-module: + Removed as of now, as it breaks with Perl 5.14 (Closes: #649061) [Michael Lustfield] * debian/control: + Added Map module to nginx-light modules list. * debian/rules: + Removed --without-http_map_module form nginx-light. * debian/nginx-common.install: + Changed ufw profile installation (LP: #825349). - debian/ufw.profile -> debian/ufw/nginx. * debian/nginx-common.preinst: + Cleanup of moved nginx profile. * debian/conf/nginx.conf: + Added a default map for $server_https (on\|off). * debian/conf/fastcgi_params: + Pass HTTPS so $_SERVER['HTTPS'] is set (LP: #857831). * debian/conf/mime.types: + Added json type (LP: #883440). * debian/conf/sites-available/default: + Added notes about PHP (Closes: #642995). + Changed location /doc from root to alias. + Changed location /doc to /doc/ for people that don't bother reading or learning anything about Nginx configuration files (LP: #840358).	Kartik Mistry	1.1.8-1	12 years ago
46	Rebuild for Perl 5.14. Rebuild for Perl 5.14.	Colin Watson	1.1.4-2build1	12 years ago
45	[Kartik Mistry] [Kartik Mistry] * debian/modules: + Updated nginx-upload-progress module, Thanks to upstream for fixing issue that FTBFS nginx on kFreeBSD-* archs. + Updated nginx-lua module to latest upstream.	Kartik Mistry	1.1.4-2	12 years ago
44	* New upstream release * New upstream release * debian/control: + nginx Depends on either nginx-full or nginx-light, Thanks to Hans van Kranenburg <hans.van.kranenburg@mendix.com> (Closes: #633879) * debian/copyright: + Updated to latest DEP-5 specification + Added some missing copyrights for modules + Updated copyright years	Kartik Mistry	1.0.5-1	12 years ago
43	* New upstream release * New upstream release * debian/*.lintian-overrides, debian/rules: + Removed unused lintian for missing manpages	Kartik Mistry	1.0.4-1	12 years ago
42	* New upstream release * New upstream release * debian/rules: + Removed if surrounding copy of man/ as it is required for builds. + Added nginx-upload-progress to nginx-extras. (Closes: #618306) + Added nginx-secure-downloads to nginx-extras. (Closes: #622268) + Added --prefix to configure command. (Closes: #619482) * debian/modules: + Added nginx-upload-progress/. + Added nginx-secure-download/. + Updated nginx-lua/. + Updated versions. debian/control: + Added libmhash-dev build dependency. + Updated Standards-Version to 3.9.1.	Michael Lustfield	1.0.1-1	12 years ago
41	Rebuild for Perl 5.12. Rebuild for Perl 5.12.	Colin Watson	1.0.0-2build1	12 years ago
40	* debian/rules: * debian/rules: + Removed --with-file-aio support. Fixed FTBFS on kFreeBSD-* arch (Closes: #621882)	Kartik Mistry	1.0.0-2	13 years ago
39	[Micheal Lustfield] [Micheal Lustfield] * debian/nginx-{full,light,extras}.default: + Added comment about alternative to ULIMIT. * debian/nginx-{full,light,extras}.init.d: + Added quotes around a test variable. (Closes: #610946, LP: #699736) * debian/patches/609343-log-time-iso8601.diff: + Added patch to add $time_iso8601 variable to logs. (Closes: #609343) * Clean up old logrotate files. (Closes: #608983, Closes: #610289) + Added Files: - debian/nginx-common.preinst + Modified Files: - debian/rules + Moved debian/nginx-common.logrotate to debian/logrotate. * Added common files to nginx-common package. (Closes: #610290) + Removed Files: - debian/nginx-full.dirs - debian/nginx-light.dirs - debian/nginx-full.install - debian/nginx-light.install - debian/nginx-extras.install - debian/nginx.* + Added Files: - debian/nginx-common.default - debian/nginx-common.dirs - debian/nginx-common.init.d - debian/nginx-common.install - debian/nginx-common.manpages - debian/logrotate + Modified Files: - debian/nginx-extras.dirs - debian/control - debian/rules * debian/nginx-.install: (Closes: #609797) + Removed NEWS.Debian from nginx-{full,light,extras}.install. + Added NEWS.Debian to nginx-common.install. nginx-common.postinst: + Enforce /var/log/nginx mode and user:group. (Closes: #610983) + Enforce /var/log/nginx/.log mode and user:group. (Closes: #612832) debian/rules: + Added --with-file-aio to nginx-extras. (Closes: #613175) + Removed split clients and user id modules from nginx-light. * debian/conf/sites-available/default: + Fixed a minor typo ( s/Quickstart/QuickStart/ ). (Closes: #613355) * debian/conf/mime.types: + Changed xml type to application/xhtml+xml. (Closes: #613851) * debian/help/docs/fcgiwrap: + Removed Ubuntu specific line in docs. (Closes: #614987) * debian/conf/sites-available/default: + Fixed a pointer to a file. (Closes: #614980) [Kartik Mistry] * debian/*.lintian-overrides: + Add Lintian overrides for nginx man page. We've manpage in nginx-common binary	Michael Lustfield	0.8.54-4	13 years ago

Older »