-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 08 Nov 2018 18:32:42 +0100 Source: nginx Binary: nginx nginx-doc nginx-common nginx-full nginx-full-dbg nginx-light nginx-light-dbg nginx-extras nginx-extras-dbg Architecture: source all amd64 Version: 1.6.2-5+deb8u6 Distribution: jessie-security Urgency: high Maintainer: Kartik Mistry <kartik@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-extras-dbg - nginx web/proxy server (extended version) - debugging symbols nginx-full - nginx web/proxy server (standard version) nginx-full-dbg - nginx web/proxy server (standard version) - debugging symbols nginx-light - nginx web/proxy server (basic version) nginx-light-dbg - nginx web/proxy server (basic version) - debugging symbols Closes: 913090 Changes: nginx (1.6.2-5+deb8u6) jessie-security; urgency=high . * CVE-2018-16845: Prevent a denial of service vulnerability due to an integer underflow whilst calculating an MP4 header sizes. Previously, there was no validation for the size of a 64-bit atom in an MP4 file. This could lead to a CPU hog when the size is 0 or various other problems due to integer underflow when the calculating atom data size, including segmentation faults or even worker-process memory disclosure. (Closes: #913090) Checksums-Sha1: d76b68ba2e6be79d34a1ee35d63cae2304627be5 2965 nginx_1.6.2-5+deb8u6.dsc d4449b9a64cef46910de0768ab00689535898afb 612388 nginx_1.6.2-5+deb8u6.debian.tar.xz 58cfe8fc43cfd0bf359de0da52e968685152c8a4 72930 nginx_1.6.2-5+deb8u6_all.deb 2c30a93f505c8faced56e84760cd7ce2ca78c272 84462 nginx-doc_1.6.2-5+deb8u6_all.deb 44bca1d211ab60366e3aca410bdb3ede9cc31a05 88432 nginx-common_1.6.2-5+deb8u6_all.deb 83a937edd77f1416b46f3383812e4fd1e7a374fe 430636 nginx-full_1.6.2-5+deb8u6_amd64.deb 616d2c8413b01f6d156209b78dfa38bb1cb4465b 3141082 nginx-full-dbg_1.6.2-5+deb8u6_amd64.deb 0625df7a9f0557467c879e2261d37ab57b798d16 333208 nginx-light_1.6.2-5+deb8u6_amd64.deb 60346d46eaca45b80f72ecf13d61d56c8b022e57 2180344 nginx-light-dbg_1.6.2-5+deb8u6_amd64.deb 77744bcbb5fc160760aef995eefa77002a8fb314 595672 nginx-extras_1.6.2-5+deb8u6_amd64.deb 9f9f627ca7a12e3a1068a8ec0822b199aaa55bcf 4982726 nginx-extras-dbg_1.6.2-5+deb8u6_amd64.deb Checksums-Sha256: a15d73caaacf84468621470a57060c9f4b102fd2a6336774c2d71c1e88afc8a1 2965 nginx_1.6.2-5+deb8u6.dsc 2169161049dde243df3047206d3bb4651bc79d017d83a5b49820d27df8f2aafd 612388 nginx_1.6.2-5+deb8u6.debian.tar.xz 9d4af585935db68a1640a3931c2d53e9647c54e6c5cfb8a08a73c6e91bf25090 72930 nginx_1.6.2-5+deb8u6_all.deb d6369c10136192adf86234e5d7303b6f6474cc895ebf82481d5f67e97ff76333 84462 nginx-doc_1.6.2-5+deb8u6_all.deb 89c6d4c4c66023a91ff7e3677f20d06931404e7881231920397bd15b5cf4e6cd 88432 nginx-common_1.6.2-5+deb8u6_all.deb 4c8e61f56fe0af4d301570d577f8747d3e943837a872c3bee85d2603d03400d1 430636 nginx-full_1.6.2-5+deb8u6_amd64.deb 202db8bc816c1243daf914d465b2e4a6b87b43ab4f6bfeb62910539284b1dbdd 3141082 nginx-full-dbg_1.6.2-5+deb8u6_amd64.deb 96af472d823ce5a3aaa51d0c2461f0722330c65874c65ee51a835d0bc00ab78a 333208 nginx-light_1.6.2-5+deb8u6_amd64.deb 492eb2e175a2f915a73e15b00f1052d33cfc11bd8bfff2f073cec6c7bf8e1ee2 2180344 nginx-light-dbg_1.6.2-5+deb8u6_amd64.deb 82a6d7a5c8c89ee942418801ef04cf40cc7722c758b9e6d6363d76bd9945a941 595672 nginx-extras_1.6.2-5+deb8u6_amd64.deb 8f42c2f7a0127a99b1fbd59e16eb94fe67393f70dd41c403822367b6f29a33a9 4982726 nginx-extras-dbg_1.6.2-5+deb8u6_amd64.deb Files: af95f140c6fa3e1b6c607ed82c3e357a 2965 httpd optional nginx_1.6.2-5+deb8u6.dsc 2b0702d3936161e63ecd31756a854b54 612388 httpd optional nginx_1.6.2-5+deb8u6.debian.tar.xz 393b4c0ee526cccdfd2aa71e3cefe93b 72930 httpd optional nginx_1.6.2-5+deb8u6_all.deb a7e2bbe3d7cc41bd7e12e87530d601db 84462 doc optional nginx-doc_1.6.2-5+deb8u6_all.deb 08022ce8cf0fcf28361ef42db1987835 88432 httpd optional nginx-common_1.6.2-5+deb8u6_all.deb d27bce75c268c615af62ca017631108b 430636 httpd optional nginx-full_1.6.2-5+deb8u6_amd64.deb a37bc1e9ee13e4c9716f03e85b7e6863 3141082 debug extra nginx-full-dbg_1.6.2-5+deb8u6_amd64.deb 0530f440fa78c3affcff328e6c607337 333208 httpd extra nginx-light_1.6.2-5+deb8u6_amd64.deb 7e1b2743659d4b3a6943469367063ba9 2180344 debug extra nginx-light-dbg_1.6.2-5+deb8u6_amd64.deb d77b914dc03237cc391c0a0c322af905 595672 httpd extra nginx-extras_1.6.2-5+deb8u6_amd64.deb 9dcf19b726bc1903de6b210980b538a8 4982726 debug extra nginx-extras-dbg_1.6.2-5+deb8u6_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlvkd+YACgkQHpU+J9Qx Hljg5w/8CnVlebKXv3jWa/OYbFJyAAxR3DJAG4ubFy/mOYz/eQaBxkVE1rDnO65K OdqYkSd4m8F9D9+v+vJpCwq5STzdmyZBeXJWUMc3+mVlRrqr0QFiFiPI85SRSxyr kC0kFt65xTzQ8T4sF+BnGkD8DA+XCFfyzhGtDtOe7L3ktODVwrgC73jAPcXG4hrC yzQXcMTZo6YDO7Nk/jkhhwuSaRgjAWqVjeBDGQ3b4+x2Dyxnta8STEoEE1l+oimd JN91XRT8fYRaaHKy5Dp9aD1nD1bXhNSL9SIwhhcpdb4wmLP8zX2FO4+bHcNrDN17 Zths6Qzl1zzI2XkwK0EbZ/4KekypkGe/0EbEdWU86RrYbS2alvRi3cEZlWwEB9GH 2Tpfc0lblgvUAjNoSxGSnNt1U+ArYujepNuWXJH3PO0LaT/wumUTBjPe6x7XwdF2 vBKw6zXF8Gs7cV9xTh+JuHqL+orQxPMAEuNCPpJ4Ju0A/56V3LSgbdbExAG6XRbE 3Nw+KPFKyGy2N+xpsI185fCfN3WwqSggM8vyaZAgbjL1G3ivqYvzUbxQbVPcQzTP Jii9qmU3CWUi2VUuVXxshJhe4RDm8yntD85BoeYCixAZHhBNIbWgNEusx5hWBBRA HZxmdjIo7hD1UshTL9iC7EpeU1489ADm1S1GmY3Z6+foT3vz/PM= =+THS -----END PGP SIGNATURE-----
