-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 29 May 2021 21:16:25 +0530
Source: nginx
Architecture: source
Version: 1.10.3-1+deb9u6
Distribution: stretch-security
Urgency: high
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh.gupta@canonical.com>
Changes:
nginx (1.10.3-1+deb9u6) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* SECURITY UPDATE: DNS Resolver issues
- debian/patches/CVE-2021-23017-1.patch: fixed off-by-one write in
src/core/ngx_resolver.c.
- debian/patches/CVE-2021-23017-2.patch: fixed off-by-one read in
src/core/ngx_resolver.c.
- CVE-2021-23017
Checksums-Sha1:
ecad2e2a69ef90b86b0edbf460587bd55eb61299 4273 nginx_1.10.3-1+deb9u6.dsc
95cf32c3e33efc53ac81338a5779fbaa425f02e2 911509 nginx_1.10.3.orig.tar.gz
f87c971f94e8087d3bb52411adb921e4115b3ada 852112 nginx_1.10.3-1+deb9u6.debian.tar.xz
69c920288c9aed9264ed6fd575c30e6f079790ca 6787 nginx_1.10.3-1+deb9u6_source.buildinfo
Checksums-Sha256:
8c715c9c3566fef0f7fe819a82c6c76c551e14bcb5441bbf82ffb79d44c9cd6d 4273 nginx_1.10.3-1+deb9u6.dsc
75020f1364cac459cb733c4e1caed2d00376e40ea05588fb8793076a4c69dd90 911509 nginx_1.10.3.orig.tar.gz
7dac6c7242d990f30d2e8623750f30bdc317b13bf9f801138e28b9cf9bd9aedb 852112 nginx_1.10.3-1+deb9u6.debian.tar.xz
f8925c608b76866ffe6790032a5044648f9d636cf1e19299b3b85f8f658f6e62 6787 nginx_1.10.3-1+deb9u6_source.buildinfo
Files:
d905aea2b79fb0d90ab31c580731559b 4273 httpd optional nginx_1.10.3-1+deb9u6.dsc
204a20cb4f0b0c9db746c630d89ff4ea 911509 httpd optional nginx_1.10.3.orig.tar.gz
1715e54ad75315986ff04889ca4a2e03 852112 httpd optional nginx_1.10.3-1+deb9u6.debian.tar.xz
2857308af092cbe384c9cfa14d3244fc 6787 httpd optional nginx_1.10.3-1+deb9u6_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Y63O
-----END PGP SIGNATURE-----
