-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 19 Aug 2019 11:30:08 +0300 Source: nginx Architecture: source Version: 1.14.2-3 Distribution: unstable Urgency: high Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net> Changed-By: Christos Trochalakis <ctrochalakis@debian.org> Closes: 935037 Changes: nginx (1.14.2-3) unstable; urgency=high . * Backport upstream fixes for 3 CVEs (Closes: #935037) Those fixes affect Nginx HTTP/2 implementation, which might cause excessive memory consumption and CPU usage. (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516). Checksums-Sha1: a88dbf47cde24a040af9359704e54e3f41b9b186 4149 nginx_1.14.2-3.dsc 0285ab4a477eba8a0b849beeb1ddd7dd5adf463a 930492 nginx_1.14.2-3.debian.tar.xz 0cf38803ebb320ba32dcd560a0c54b1cad23f4fd 22111 nginx_1.14.2-3_amd64.buildinfo Checksums-Sha256: 9b0ef5ac174928107647794875903db684a28447ed683c6e84e9280756eb46b2 4149 nginx_1.14.2-3.dsc b252e5a20bfc89891814f9d98fe1654ebf19249e315f4b0bb4f8deb93aebd49b 930492 nginx_1.14.2-3.debian.tar.xz 36da7bab635e3b6ab095cfce2eed91d28998085c4444e2347697a8105e7e5c93 22111 nginx_1.14.2-3_amd64.buildinfo Files: e966afc7e9b96decdd00184d8ca61959 4149 httpd optional nginx_1.14.2-3.dsc 3d6aa011b541b79d828b71ce777693a7 930492 httpd optional nginx_1.14.2-3.debian.tar.xz e12318c452b9677ebe19fb502aac29d2 22111 httpd optional nginx_1.14.2-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEf2SPbCEjyY+zKcgrETYmAKdH7NkFAl1aYPcACgkQETYmAKdH 7NnU2Q//dGY+j/Vm1pJQkD7Swx17lmERzAiFImV2c6k/LJFO9cbbfjNUjtguf0Rv j9SwuXcqrO4PNI+spd7Ai1dWftUaRosA9CYvAQP+fdbiG9oDj77g0vQ7je+Pn7uA PfFKScAkiXoLanmqZlt+9v34pImX/UHo7Hau1hV3KyPIg5OHadbR0nwUeuC3ti+5 JQ3zmPmfhQIDWQgco764A7EX8Q1QTM0v4q63GncCCULlcWwfLhpA9a2nln+pEVVf V/QDcmnDx8QzWkSErl2T6q3f4x56bJlJpJO/T7yv6E3PX1f8xEVoJ+CBEW/3twC5 5pCS71TvEwMRv2hQs/KkroMxpIkfgf9fIW9ZroJjDY3P8J/SYMlebrDXQh81IJri C1J0bgCPUUHwpFblixRJgAs54cgT8fF6KVWWwiGOWcEqMAo44vPxkWS9LDo73TWp +QqOgc+QDv5BHlxSWlxx/LijjXZ6RZDuWgpddZGXyFFZ+YLAXM7fBPoUv4B6ABAL xJllP3suRg5gDi6efJ8s0Sbibbc2ALdXDPOCG4Z+dTI7GMs+hRxiOspE+xCiD/A0 eNmygh/zfPVBKB3W+sJfIJSP00cKGVC/h9Snzi9Da0I4HKQq9agUb+CuZdgGsa1l +ilEjh9oZUeJeBfw8R99aHnK4VS3JxLrPISyR0PABx+Q3pLRUWo= =r1D6 -----END PGP SIGNATURE-----
