-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 19 Aug 2024 18:46:30 +0200 Source: nginx Architecture: source Version: 1.26.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net> Changed-By: Jan Mojžíš <jan.mojzis@gmail.com> Closes: 1070488 1078971 Changes: nginx (1.26.0-2) unstable; urgency=medium . [ Jan Mojžíš ] * d/rules: enable QUIC and HTTP/3 module (Closes: 1070488) * d/control: bump Standards-Version: 4.7.0, no changes * d/p/nginx-1.26.1.patch add, backport changes from the nginx 1.26.1 and fix CVE-2024-32760, CVE-2024-31079, CVE-2024-35200, CVE-2024-34161 * d/p/CVE-2024-7347.patch add, backport CVE-2024-7347 fix (Closes: 1078971) * d/libnginx-mod.abisubstvars updated comment when ABI needs to be changed . [ Thomas Ward ] * d/conf/nginx.conf: Update default options for current security practices and standards. SSL protos, disable prefer server ciphers, hide server tokens/versions in responses. Checksums-Sha1: a1f537a03ce8f64734fb9622d6b43c00f657f2c6 3554 nginx_1.26.0-2.dsc 6c657915ec55b8c6543cb5bfb3acd1ed2acfdead 77660 nginx_1.26.0-2.debian.tar.xz 75d2498f4f5243c95292f329b6c15029ff4d4c37 9016 nginx_1.26.0-2_source.buildinfo Checksums-Sha256: be536b17fd73c3443582c6dae1230f708cd203d9bd78dae1b49111a263766786 3554 nginx_1.26.0-2.dsc 9c14c4a283eaa75d61d27216a6faa04b5dbe54c2000012418ce35bf69502cb5d 77660 nginx_1.26.0-2.debian.tar.xz b0fefcdc90a9097a4c7eade060eb22f1999e8423be99d3ad66744bcf44d9e6d1 9016 nginx_1.26.0-2_source.buildinfo Files: afc4d667701ce1d1775757780a0f6438 3554 httpd optional nginx_1.26.0-2.dsc 8862e11d3bf907306923a0b6579f99cc 77660 httpd optional nginx_1.26.0-2.debian.tar.xz b9cda3dda1ce82fd8e14a85e322a6460 9016 httpd optional nginx_1.26.0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEE0Aiwwj2EeeRrn8uQRdpRdJaTn/kFAmbEoz4VHGphbi5tb2p6 aXNAZ21haWwuY29tAAoJEEXaUXSWk5/53ikQAJ6T6jTtUFOqNT2rHZgSYKs4Zlq9 doTQV6WaZfPJ2tP9MNARV/4cPYK5usAbA6BspiQiRx5LW+0wnsOMzUPeipTKRMQu EQ8+bBRSK3zfCJZtjAAj+m0zFdOwhDKuS5iN74ETEfPWnXifx6iQ9cw17IzPdcgl ZVJjhocMln8Ginch8kcaaOWoQIBgVPhJygTBSRc3BdIVEYMq0Gzh7lTrLrdPH++m 025RAlw3VEEFDjVbtdoDk+5uHW73R04cVCAyOBKohUbGCbMoL2rQ04OSVmYyI3NE Cszl3GBcIKjvzfoZv4U2r8lZ7CmJ/F2WnI+l/MYEFYanz7GgRuTKYiOAN3Y5Ub91 BfP/0Ln45HyytXkWjfjf7JGxM+5/84tmyfNWfunLddk61C1HagXi6ZwQo8qVsoyC M3HKvOREI6DUhEFx7lgi770ILrw2LiTk/nm4MoJWoXPpCev5vV3CmJzGjaSn4dCp LDpLEU8GwuNUJpC2qDfpwJCVwkksuXWYZBGPDIUS72qRtRzoCdvkyLPHbQoPk9ar fGZH44t2dErfHplRlfKrBvXxkNSdmDvdpVZDV4eBV7GIt2jnWPUNuurECIE/bMda cYZVM57XmoqtP9fNO1xSGqSSqruUfM3LZNY7cGA6sz8G1SQXxbw+llJt6nicJY1P NzJmtQP0PnCSiLZa =ngk0 -----END PGP SIGNATURE-----
