-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 07 Jun 2021 21:02:34 +0200 Source: nginx Binary: nginx nginx-doc nginx-common nginx-full nginx-light nginx-extras libnginx-mod-http-geoip libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-http-perl libnginx-mod-http-auth-pam libnginx-mod-http-lua libnginx-mod-http-ndk libnginx-mod-nchan libnginx-mod-http-echo libnginx-mod-http-upstream-fair libnginx-mod-http-headers-more-filter libnginx-mod-http-cache-purge libnginx-mod-http-fancyindex libnginx-mod-http-uploadprogress libnginx-mod-http-subs-filter libnginx-mod-http-dav-ext Architecture: source Version: 1.10.3-1+deb9u7 Distribution: stretch-security Urgency: high Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: libnginx-mod-http-auth-pam - PAM authentication module for Nginx libnginx-mod-http-cache-purge - Purge content from Nginx caches libnginx-mod-http-dav-ext - WebDAV missing commands support for Nginx libnginx-mod-http-echo - Bring echo and more shell style goodies to Nginx libnginx-mod-http-fancyindex - Fancy indexes module for the Nginx libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-headers-more-filter - Set and clear input and output headers for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-lua - Lua module for Nginx libnginx-mod-http-ndk - Nginx Development Kit module libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-subs-filter - Substitution filter module for Nginx libnginx-mod-http-uploadprogress - Upload progress system for Nginx libnginx-mod-http-upstream-fair - Nginx Upstream Fair Proxy Load Balancer libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-nchan - Fast, flexible pub/sub server for Nginx libnginx-mod-stream - Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-full - nginx web/proxy server (standard version) nginx-light - nginx web/proxy server (basic version) Changes: nginx (1.10.3-1+deb9u7) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2017-20005: NGINX has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module. Checksums-Sha1: c4a1be57445bedc50441e405ca089fafb6b3a9ca 4383 nginx_1.10.3-1+deb9u7.dsc 8ba08b57b10b7fb7a96bf89ff8f2929f31d2994e 852708 nginx_1.10.3-1+deb9u7.debian.tar.xz bb07f14201c0f99d5f15579613572984f601d0b9 23014 nginx_1.10.3-1+deb9u7_amd64.buildinfo Checksums-Sha256: 2c139e6829665905fe6d244ba68d7fa971142716ea6693e2f09a6911eca67664 4383 nginx_1.10.3-1+deb9u7.dsc 2aad2914bcdcb0d2821edbd81a10d813ff93d01674f5048e83a1e7d49292f473 852708 nginx_1.10.3-1+deb9u7.debian.tar.xz 6bcd624fbb850845a35c714caddb0f5c2b692f3ff28f3a71fd44a8b6584f8890 23014 nginx_1.10.3-1+deb9u7_amd64.buildinfo Files: ba793e608b76969ad6de1d97bd923833 4383 httpd optional nginx_1.10.3-1+deb9u7.dsc 90d2ee925fb3b6c38a6e30329754cc90 852708 httpd optional nginx_1.10.3-1+deb9u7.debian.tar.xz 0a2a76e60b8c83d71fe478ec8294205c 23014 httpd optional nginx_1.10.3-1+deb9u7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmC+fDBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkfmMP/04hvDMJcwY6WWSrvhXyp7CbN7Ho/uNKukhn Yc+FmWZDVp0onqANaYeczWCXZexjmo84Ts1Lr8BGbfvavK0M+/lYErtpPQQfPkl7 rkeKksATBQ8JImI6Ta5clQU+u5pE0Z5Jig/XOa44z3PVsXDAdz3IH+1FDXcI3pMM 6mNx9E+1Wo+CFR5hrPaGEOLmWe/goMWqLYs8Yr+NFOTKdrP6qFWhnvRYI5tsL3nl MDMSYEz81MN2b+9OL0YnmlYylA06pJZ88QnkCL/7rYDOlNNf8sCQLl1SiYxi4gvR KCZQAj63wlBihLva8cxGim4h6xBLKkm/hmYKDTymUxYDCrFO0Iq/3wNvd/I4noGF 9h83b9h4zFMzDtKnhftCGzzRJKgbONrlLWlES8Gv9h6dWLshUHq5XWx8Q/emZYgm dAb0UgVeQV/fihztLYxcjYL4dSZb8mwtTJqpQQv9LuTsTkaj6zTqo6GYyxj5ZOO+ Z3VJ1G2m4xnF0I1A1k6ZsqjxPvrXsAsxSmVxszqeB9fg1ZnA2j/AyBfg8DFC0kmb dpWtY/snEzYe2AImSxvH5kOND7LXk/FvTZjTeQJ4aXh1LpaRNXuT3YF+vY8EHpUf vHqzWdgqM72BqK6JoNcO/pd7eX9wl5AU1dFz6bYkMpnO5kZZga6dPLxUr0W0vhEL uVPTVeP9 =7KmD -----END PGP SIGNATURE-----