-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 14 Feb 2017 10:33:44 +0200 Source: nginx Binary: nginx nginx-doc nginx-common nginx-full nginx-light nginx-extras libnginx-mod-http-geoip libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-http-perl libnginx-mod-http-auth-pam libnginx-mod-http-lua libnginx-mod-http-ndk libnginx-mod-nchan libnginx-mod-http-echo libnginx-mod-http-upstream-fair libnginx-mod-http-headers-more-filter libnginx-mod-http-cache-purge libnginx-mod-http-fancyindex libnginx-mod-http-uploadprogress libnginx-mod-http-subs-filter libnginx-mod-http-dav-ext Architecture: source all amd64 Version: 1.10.2-4~bpo8+1 Distribution: jessie-backports Urgency: high Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@lists.alioth.debian.org> Changed-By: Christos Trochalakis <ctrochalakis@debian.org> Description: libnginx-mod-http-auth-pam - PAM authentication module for Nginx libnginx-mod-http-cache-purge - Purge content from Nginx caches libnginx-mod-http-dav-ext - WebDAV missing commands support for Nginx libnginx-mod-http-echo - Bring echo and more shell style goodies to Nginx libnginx-mod-http-fancyindex - Fancy indexes module for the Nginx libnginx-mod-http-geoip - GeoIP HTTP module for Nginx libnginx-mod-http-headers-more-filter - Set and clear input and output headers for Nginx libnginx-mod-http-image-filter - HTTP image filter module for Nginx libnginx-mod-http-lua - Lua module for Nginx libnginx-mod-http-ndk - Nginx Development Kit module libnginx-mod-http-perl - Perl module for Nginx libnginx-mod-http-subs-filter - Substitution filter module for Nginx libnginx-mod-http-uploadprogress - Upload progress system for Nginx libnginx-mod-http-upstream-fair - Nginx Upstream Fair Proxy Load Balancer libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx libnginx-mod-mail - Mail module for Nginx libnginx-mod-nchan - Fast, flexible pub/sub server for Nginx libnginx-mod-stream - Stream module for Nginx nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-full - nginx web/proxy server (standard version) nginx-light - nginx web/proxy server (basic version) Closes: 812484 812806 815080 816095 819062 822553 823435 825960 826061 828453 836134 841230 842295 843770 844473 844506 844712 845693 846085 846145 846522 850857 Changes: nginx (1.10.2-4~bpo8+1) jessie-backports; urgency=medium . * Rebuild for jessie-backports. * Build against openssl 1.0.2 enabling ALPN support for http/2. * Explicitly disable PIE as it breaks shared libs. . nginx (1.10.2-4) unstable; urgency=medium . * Switch module reloading logic to dpkg triggers. * Enable modules after a remove -> install cycle. * Move module patches to debian/modules/patches. * Backport curve list support from 1.11.x. (Closes: #846085) * Add a NEWS entry regarding dynamic modules. * Merge de,fr,nl,pt_BR,da translations. Thanks to Chris Leick. (Closes: #843770) Thanks to Julien Patriarca. (Closes: #844712) Thanks to Frans Spiesschaert. (Closes: #845693) Thanks to Adriano Rafael Gomes. (Closes: #846522) Thanks to Joe Dalton. (Closes: #850857) . nginx (1.10.2-3) unstable; urgency=medium . [ Michael Lustfield ] * debian/conf/sites-enabled/default: + Correcting location of default php-fpm socket. (Closes: #846145) . [ Christos Trochalakis ] * debian/rules: Correctly clean patched modules. Thanks to Sven-Haegar Koch for the initial patch. (Closes: #844506) * mod: Upgrade nchan to 1.0.8. (Closes: #844473) * mod: Upgrade nginx-lua to 0.10.7. * Update nginx-lua OpenSSL 1.1.0 patch. * Reactivate PIE. Thanks to Markus Waldeck for the suggestion. * mod: Check if nginx binary exists before reloading. * mod: Upgrade headers-mode to 0.32. * mod: Upgrade development kit to 0.3.0. . nginx (1.10.2-2) unstable; urgency=medium . * Build against OpenSSL 1.1.0. (Closes: #828453) + Patch for nginx-lua by Alessandro Ghedini. + Patch for nginx-upstream-fair by Kurt Roeckx. * debian/modules: + Rethink module patching logic. + Convert dav-ext to a dynamic module package: o libnginx-mod-http-dav-ext . nginx (1.10.2-1) unstable; urgency=high . [ Christos Trochalakis ] * New upstream release. * debian/nginx-common.postinst: + CVE-2016-1247: Secure log file handling (owner & permissions) against privilege escalation attacks. /var/log/nginx is now owned by root:adm. Thanks ro Dawid Golunski for the report. Changing /var/log/nginx permissions effectively reopens #701112, since log files can be world-readable. This is a trade-off until a better log opening solution is implemented upstream (trac:376). (Closes: #842295) * debian/control: + Version depend on lsb-base (>= 3.0-6). Fixes lintian init.d-script-needs-depends-on-lsb-base. * debian/nginx-*.lintian-overrides: + Drop unused spelling-error-in-binary override. . [ Michael Lustfield ] * debian/conf/sites-available/default: + Updated PHP sample configuration block. (Closes: #841230) . nginx (1.10.1-3) unstable; urgency=medium . * debian/control: + Drop nginx-*-dbg packages in favor of autogenerated -dbgsym packages. + Remove relic Breaks/Replaces from nginx-common. + Fix lsb-base dependencies. + Switch Maintainer to the Nginx Packaging Team and keep active maintainers as uploaders. Jose, Fabio, Dmitry & Cyril, thanks a lot for all your contributions! . nginx (1.10.1-2) unstable; urgency=medium . [ Christos Trochalakis ] * debian/control: + Don't allow building against liblua5.1-0-dev on architectures that libluajit is available. + Enable slice module on all flavors. (Closes: #815080) + Enable SCGI & uWSGI module for nginx-light. + Convert to dynamic module packages: o libnginx-mod-nchan o libnginx-mod-http-echo o libnginx-mod-http-upstream-fair o libnginx-mod-http-headers-more-filter o libnginx-mod-http-cache-purge o libnginx-mod-http-fancyindex o libnginx-mod-http-uploadprogress o libnginx-mod-http-subs-filter * debian/modules: + Replace http-push with nchan v1.0.2 (Closes: #836134) + Upgrade nginx-lua to v0.10.6 + Upgrade nginx-echo to v0.60 + Upgrade headers-more to v0.31 + Upgrade fancyindex to v0.4.1 + Upgrade upload-progress to v0.9.2 . [ Michael Lustfield ] * debian/patches/0003-*.patch: + Use _GNU_SOURCE on GNU/kFreeBSD. (Closes: #826061) Thanks Steven Chamberlain for the patch. * debian/nginx-*.postinst: + Make nginx-*.postinst use invoke-rc.d. (Closes: #823435) Thanks Simon Deziel for the patch. . nginx (1.10.1-1) unstable; urgency=medium . [ Christos Trochalakis ] * New upstream release (1.10.1) Fixes CVE-2016-4450 NULL pointer dereference while writing client request body. (Closes: #825960) . * debian/control: + Generate dbgsym packages only if dh_strip supports it. Thanks Faidon Liambotis for the hint. . nginx (1.10.0-1) unstable; urgency=medium . [ Christos Trochalakis ] * New upstream release (1.10.0) . nginx (1.9.14-2) unstable; urgency=medium . [ Christos Trochalakis ] * debian/control: + Fix upgrading nginx-extras from testing. (Closes: #822553) + Bump Standards to 3.9.8, no changes needed. * debian/libnginx-mod-http-perl.lintian-overrides: + Override wrong-section-according-to-package-name warning. . nginx (1.9.14-1) unstable; urgency=medium . [ Christos Trochalakis ] * New upstream release (1.9.14) (Closes: #812806) * debian: + Setup dynamic module flow, and implement a simple dh_nginx helper for internal use. + Split modules in libnginx-mod-* packages. Not all modules are ready for dynamic building. * debian/control: + Enable http/2, thread pool & WebDAV on nginx-light. In order for dynamic modules to be loadable in all nginx flavors we need to ensure they share the same build signature. (Closes: #816095) + nginx-common & nginx-doc are now 'Multi-Arch: foreign'. (Closes: #812484) Thanks Elrond for the report and the initial patch. + Use secure VCS uri (lintian). + Bump Standards to 3.9.7. * debian/rules: + Disable PIE for now so we can build dynamic modules. * debian/tests/control: + Test if modules are loadable in nginx-light. * debian/nginx-common.nginx.service: + Documentation points to nginx man page. * debian/modules/nginx-lua: + Update nginx-lua to v0.12 and convert it to a dyn module. Fixes buiding failures with nginx 1.9.11. * debian/modules/nginx-auth-pam: + Update http-auth-pam module to 1.5 and convert it to a dyn module. (Closes: #819062) Checksums-Sha1: b60debc95be5438d8e29cbe5d3b271e6bb4a1698 4214 nginx_1.10.2-4~bpo8+1.dsc 5db05888621ab5716cbcd4ebb0a009622abf494f 847840 nginx_1.10.2-4~bpo8+1.debian.tar.xz 83c1171431b3ec00dcc7e4bbc96f8995564d95eb 81354 nginx_1.10.2-4~bpo8+1_all.deb 622891022d5e94091b17043d11259e8baf7694e7 92820 nginx-doc_1.10.2-4~bpo8+1_all.deb 84ff8d125e830c7eca7cb139f2d619e49aaf5a54 104658 nginx-common_1.10.2-4~bpo8+1_all.deb 3db190dedd3f188ea5b2415c53d8b406b4e3a505 442530 nginx-full_1.10.2-4~bpo8+1_amd64.deb 5c2ad59c7d2e11bd65a871e6a7f3ff39b605ead8 420616 nginx-light_1.10.2-4~bpo8+1_amd64.deb ebc277c616452b252983e47468fc3b1bc70b4801 455104 nginx-extras_1.10.2-4~bpo8+1_amd64.deb a93ef8cf34e2f548df1816e7fc804864b4a1fd1c 87002 libnginx-mod-http-geoip_1.10.2-4~bpo8+1_amd64.deb 2e4c18e3fd413cb294ec2ae780ca708b46ee3be7 90016 libnginx-mod-http-image-filter_1.10.2-4~bpo8+1_amd64.deb 299b92fedceba64b60b491d2e199a0f7ebdf5377 88842 libnginx-mod-http-xslt-filter_1.10.2-4~bpo8+1_amd64.deb 6bb4b80f08f68cc302bf7d353bc3f6b0dcc18b13 116652 libnginx-mod-mail_1.10.2-4~bpo8+1_amd64.deb 528cbb52d5baa2744ac1ed1f9866fb67f15ef01b 109572 libnginx-mod-stream_1.10.2-4~bpo8+1_amd64.deb 451b29ea361d45f8423fe5de401715b59c98fe77 97816 libnginx-mod-http-perl_1.10.2-4~bpo8+1_amd64.deb 4ddedc14a2a7995553675bbf0d9587bf7cdcd1b1 85836 libnginx-mod-http-auth-pam_1.10.2-4~bpo8+1_amd64.deb 7cbba0197afaad4789232eed633ab677001180d4 224358 libnginx-mod-http-lua_1.10.2-4~bpo8+1_amd64.deb eee663de03d09bc335024d9925fc9745fbabb4cb 86244 libnginx-mod-http-ndk_1.10.2-4~bpo8+1_amd64.deb 361894cbec0de6aded2ef823cafb4b23bd35da3c 247180 libnginx-mod-nchan_1.10.2-4~bpo8+1_amd64.deb 5b2c221db3eb0c7d0f4b5400c2dd6ddb119fa0a6 97226 libnginx-mod-http-echo_1.10.2-4~bpo8+1_amd64.deb b4752f06727b01f2b5e9307c5fbbd23ba815500c 89084 libnginx-mod-http-upstream-fair_1.10.2-4~bpo8+1_amd64.deb c391af23255422c442f9f00db600a7d94e3c748f 91216 libnginx-mod-http-headers-more-filter_1.10.2-4~bpo8+1_amd64.deb fa1ef6d82ec565e0e049459c0062ed001662d64c 88162 libnginx-mod-http-cache-purge_1.10.2-4~bpo8+1_amd64.deb b87240647d715090441cb95727eb3c84c40cdd56 90792 libnginx-mod-http-fancyindex_1.10.2-4~bpo8+1_amd64.deb 677cc358ebc9a66cddc1eaec56a2ffec9d67e68e 92372 libnginx-mod-http-uploadprogress_1.10.2-4~bpo8+1_amd64.deb 718b9526f71d70922e95e65d3c5ab2cb13d7bfd7 88788 libnginx-mod-http-subs-filter_1.10.2-4~bpo8+1_amd64.deb d2924fb068a543d85ff34e7e0a4cd6d28a3b54b1 87586 libnginx-mod-http-dav-ext_1.10.2-4~bpo8+1_amd64.deb Checksums-Sha256: 1a6acc6ff629c3f6681f15ec4c23cc9f85d945595ea56c79db9a93fd08d3c3a2 4214 nginx_1.10.2-4~bpo8+1.dsc a485512b521b1b2c673983787315feec1c2c85992545a7567c34194e01169777 847840 nginx_1.10.2-4~bpo8+1.debian.tar.xz ba5dcd1ace6e8ccc79a18828e0fa6f4f62dc98da8adb08cdf1ac0988b79f76f2 81354 nginx_1.10.2-4~bpo8+1_all.deb 44e36c0b60f0028c8982de5ea19ca41f8736c8ce7af2e036f23b31823632bc70 92820 nginx-doc_1.10.2-4~bpo8+1_all.deb b13c604a7a705b7e69b8699b0f0d1f0cc14aaefa0c6bd035bc8ce354844493a1 104658 nginx-common_1.10.2-4~bpo8+1_all.deb 977ceba5fe563fe91c73dfff67a36c1e2ffefd5b80c28de8cd1e3a24c67e0485 442530 nginx-full_1.10.2-4~bpo8+1_amd64.deb aa80710c9f5245d430dc185bc2bf3677eaaa6e2e159b4a373b71a88047f75763 420616 nginx-light_1.10.2-4~bpo8+1_amd64.deb 08e47362da4f32f19f561001f3a9afd970f9bbb2c0415af00ec975da69539e07 455104 nginx-extras_1.10.2-4~bpo8+1_amd64.deb fc52724e61983b0b63bb3f864411b4f361baf91e4f8cdd489e33cd5835e1766f 87002 libnginx-mod-http-geoip_1.10.2-4~bpo8+1_amd64.deb 9cd36241642332c214a3528f17285171ca74f14c2fe9bd2f593224b6539884b8 90016 libnginx-mod-http-image-filter_1.10.2-4~bpo8+1_amd64.deb 1cd3907f8746f36325d7e752106d9dbaa1a4e9aea2061e6d74562dbdd3c08474 88842 libnginx-mod-http-xslt-filter_1.10.2-4~bpo8+1_amd64.deb 3c07c97683deaf59aee40ed79e553f99a76642116c7e4622edd01b1f743b2ff1 116652 libnginx-mod-mail_1.10.2-4~bpo8+1_amd64.deb a4aa3fb7688381c672515fe95002cc2664356f1446a667c8ce9c628d8f963ed6 109572 libnginx-mod-stream_1.10.2-4~bpo8+1_amd64.deb 5615ef71b24f69e07501c4a7bc6b9c79e014c7fcaf81a246aff8dec722f2eae5 97816 libnginx-mod-http-perl_1.10.2-4~bpo8+1_amd64.deb 1496b65b9308971ba45cb905a4d5011cb0e7bd8dcd5c8ab6a46f0374ad9ee423 85836 libnginx-mod-http-auth-pam_1.10.2-4~bpo8+1_amd64.deb fc6dbdd910f2b3df531edc775d0ddf7ff889c6a3bcc8fa91af48e7c338840e53 224358 libnginx-mod-http-lua_1.10.2-4~bpo8+1_amd64.deb 464b8f6546882bf283f28beca0d38729ffc9da41143ef78edccc206aa72489f0 86244 libnginx-mod-http-ndk_1.10.2-4~bpo8+1_amd64.deb 136d9de91fff195fcbb20d19fa96f877ed989a5a5e60d692d8af980ebb54b7c7 247180 libnginx-mod-nchan_1.10.2-4~bpo8+1_amd64.deb 918116d09caa0601f3bdc40178afffbc7ecab4536263ccebbb89ba21dbed00a1 97226 libnginx-mod-http-echo_1.10.2-4~bpo8+1_amd64.deb 2461856be197a93e6960cb4a53bb01dd27659d1007f1db96c29eac3d4394a0a0 89084 libnginx-mod-http-upstream-fair_1.10.2-4~bpo8+1_amd64.deb d3d4f0c7ab1f536c6772608af03f459b837b2091b1bfed405810ad7447af1cfb 91216 libnginx-mod-http-headers-more-filter_1.10.2-4~bpo8+1_amd64.deb a62544ac2fe66c283f4eda5bee6361056f2b14e893f3d25ffec8a7f0beee03f0 88162 libnginx-mod-http-cache-purge_1.10.2-4~bpo8+1_amd64.deb 5a85ab884f797d7f91c3ad9ea4cc5ccd3773ee55fb88ef9aa7f3be4fa64cbf11 90792 libnginx-mod-http-fancyindex_1.10.2-4~bpo8+1_amd64.deb 612e16912a867828a14cbf7223942ba03aa928547a25c9e871ad762c406a8bdd 92372 libnginx-mod-http-uploadprogress_1.10.2-4~bpo8+1_amd64.deb a9cc37b231f651e425185b981984db4a9e0d789a339fb27acde58a1c1445473b 88788 libnginx-mod-http-subs-filter_1.10.2-4~bpo8+1_amd64.deb c5996c2fc6ee9cc4dc064073c0f6b885d0a08ad6e7ca7746a9952af1e05f22ce 87586 libnginx-mod-http-dav-ext_1.10.2-4~bpo8+1_amd64.deb Files: 0ede080e0c24b462fba5084ecb20c175 4214 httpd optional nginx_1.10.2-4~bpo8+1.dsc d0caf212d9372a6aa8a3b04eaffe2c87 847840 httpd optional nginx_1.10.2-4~bpo8+1.debian.tar.xz 36a0815c3f288bd3931a6974675cd587 81354 httpd optional nginx_1.10.2-4~bpo8+1_all.deb 6ac1ef3792a84d7ba271beb0c2107a02 92820 doc optional nginx-doc_1.10.2-4~bpo8+1_all.deb b495dbaae7af8caae831d76a32884cea 104658 httpd optional nginx-common_1.10.2-4~bpo8+1_all.deb 4956d400a0db56c500c8867341ff42c6 442530 httpd optional nginx-full_1.10.2-4~bpo8+1_amd64.deb 71c5034c3ce0f869908734f6990fd570 420616 httpd extra nginx-light_1.10.2-4~bpo8+1_amd64.deb 9411e40253b5ee540394ed18bea9310f 455104 httpd extra nginx-extras_1.10.2-4~bpo8+1_amd64.deb 585c8d5a40fc581fa5010e1149ad2e35 87002 httpd optional libnginx-mod-http-geoip_1.10.2-4~bpo8+1_amd64.deb 2667ccecfdbc115f8d6fc7f8391eba43 90016 httpd optional libnginx-mod-http-image-filter_1.10.2-4~bpo8+1_amd64.deb 4ab950b86f5eaf13252f49f48e43d9df 88842 httpd optional libnginx-mod-http-xslt-filter_1.10.2-4~bpo8+1_amd64.deb 64d511c8618daae8a4c0ce8057f005f6 116652 httpd optional libnginx-mod-mail_1.10.2-4~bpo8+1_amd64.deb 4a9b7c260e4ca8e3b1e458008d0cc93c 109572 httpd optional libnginx-mod-stream_1.10.2-4~bpo8+1_amd64.deb b9d9802decaba471758a44f3cd070f18 97816 httpd optional libnginx-mod-http-perl_1.10.2-4~bpo8+1_amd64.deb c2b3b8f2b0cfe7a615cdf1729658f69d 85836 httpd optional libnginx-mod-http-auth-pam_1.10.2-4~bpo8+1_amd64.deb f5bef10d3009278eaf0b919a7eea9d98 224358 httpd optional libnginx-mod-http-lua_1.10.2-4~bpo8+1_amd64.deb 0824bccdcc1112fa08b72281b80025d9 86244 httpd optional libnginx-mod-http-ndk_1.10.2-4~bpo8+1_amd64.deb 518a9b754a768c3db8340b414cb6e0dd 247180 httpd optional libnginx-mod-nchan_1.10.2-4~bpo8+1_amd64.deb b30ca1f07ec9cf9660bfdf7b3149167e 97226 httpd optional libnginx-mod-http-echo_1.10.2-4~bpo8+1_amd64.deb 911f86729ea3d0c53949a8550871fd6e 89084 httpd optional libnginx-mod-http-upstream-fair_1.10.2-4~bpo8+1_amd64.deb 1282a0ee325731f8464e8e908838fec6 91216 httpd optional libnginx-mod-http-headers-more-filter_1.10.2-4~bpo8+1_amd64.deb ba804ed65337fa2d544544f7f08d0828 88162 httpd optional libnginx-mod-http-cache-purge_1.10.2-4~bpo8+1_amd64.deb fb7b65ef4f8efe4abf24574f61d469d0 90792 httpd optional libnginx-mod-http-fancyindex_1.10.2-4~bpo8+1_amd64.deb f7e587d480f564d69dd0851a1a154507 92372 httpd optional libnginx-mod-http-uploadprogress_1.10.2-4~bpo8+1_amd64.deb 8643076f1870c02d00f6053cf43e0ba1 88788 httpd optional libnginx-mod-http-subs-filter_1.10.2-4~bpo8+1_amd64.deb decc7259d3fc050c64b36ece5e357406 87586 httpd optional libnginx-mod-http-dav-ext_1.10.2-4~bpo8+1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEf2SPbCEjyY+zKcgrETYmAKdH7NkFAlii1tgACgkQETYmAKdH 7Nk2WRAA0AgmPYPJ5ymzwpWQWo+vIhGruhRhBiBHGoyAb7ogvQKMoTxG6kG8iDTZ Gv3hCeqD+INTQPLVAwd6zug4dnkYSUtsM/KJ+ODIZNJs8g1fzAKQ5ntmZju3ELbB emqvISWGypbQk9k79zmum9VSReOvttNw7P1QLfD+uHdxoMBqlyZ/JP7KCIakKhs9 9+EbA7SP7z1xzq/YHjL9qNt5BBm0Xbdy2lpm9GydHTNooiShWk6QthptSwSv60qs /X4VzgNvII5254mnUHBNINTjjwE2gb9BTJOsj6AFCTsWTJprOHreQttOW5d8MSbE 87/gVkqWola2YNZc1sJUa93OMrpMYL+E4xHVvfwSBuk1ZpkW1cNeIsJZfdtFXR4l dgMfULps//2aAro22/glxn8qx1l4ohWdEreaC/MafhC1lGeNdMOWfF79SRMgaxni C5fNXbZNnKa8eUg0WeKrxMSsVKMFSAA7BY9ckrL2E3d1Neph1/9Xw3oNJ9oQHDrc px8iMfQF6rc6YxJJQ7oLyW3AlE+EdhDThN9B7qZQsveyT+xxKTqZneltLkUW3sDh /ctSvmr542k8azDLj2U9cpv7dBITySqy97COCte0Ba3DgWGZtY16MZ8ud+PagkY6 PgqHgz4srRtCXZUaRoJ42VRH+riLgjKfz3u2TGYOk2IyYS7KfkE= =65Od -----END PGP SIGNATURE-----