Accepted nginx 1.9.10-1~bpo8+4 (source all amd64) into jessie-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 20 Oct 2016 09:49:25 +0300
Source: nginx
Binary: nginx nginx-doc nginx-common nginx-full nginx-full-dbg nginx-light nginx-light-dbg nginx-extras nginx-extras-dbg
Architecture: source all amd64
Version: 1.9.10-1~bpo8+4
Distribution: jessie-backports
Urgency: high
Maintainer: Kartik Mistry <kartik@debian.org>
Changed-By: Christos Trochalakis <yatiohi@ideopolis.gr>
Description:
nginx - small, powerful, scalable web/proxy server
nginx-common - small, powerful, scalable web/proxy server - common files
nginx-doc - small, powerful, scalable web/proxy server - documentation
nginx-extras - nginx web/proxy server (extended version)
nginx-extras-dbg - nginx web/proxy server (extended version) - debugging symbols
nginx-full - nginx web/proxy server (standard version)
nginx-full-dbg - nginx web/proxy server (standard version) - debugging symbols
nginx-light - nginx web/proxy server (basic version)
nginx-light-dbg - nginx web/proxy server (basic version) - debugging symbols
Closes: 842295
Changes:
nginx (1.9.10-1~bpo8+4) jessie-backports; urgency=high
.
[ Christos Trochalakis ]
* debian/nginx-common.postinst:
+ CVE-2016-1247: Secure log file handling (owner & permissions)
against privilege escalation attacks. /var/log/nginx is now owned
by root:adm. Thanks ro Dawid Golunski for the report.
Changing /var/log/nginx permissions effectively reopens #701112,
since log files can be world-readable. This is a trade-off until
a better log opening solution is implemented upstream (trac:376).
(Closes: #842295)
Checksums-Sha1:
bada9fcdb0ccccac407d3cc5d7c1ca8279982668 2853 nginx_1.9.10-1~bpo8+4.dsc
754b8ef661721b5a365ff2fb691414c6d04a9fc3 647100 nginx_1.9.10-1~bpo8+4.debian.tar.xz
643dfea8dee54055014137c853940573bb476f6c 78186 nginx_1.9.10-1~bpo8+4_all.deb
ac4c52ab788ec95121201cdce7794f655ce985be 89660 nginx-doc_1.9.10-1~bpo8+4_all.deb
e4d78b23b1a55ac707b1b1d22a9c3af4321dd71a 99574 nginx-common_1.9.10-1~bpo8+4_all.deb
df623a5684938a559783be30ace616470876534e 499952 nginx-full_1.9.10-1~bpo8+4_amd64.deb
46b17c77234132b8431f31bb4b1978cc128fce99 3571366 nginx-full-dbg_1.9.10-1~bpo8+4_amd64.deb
bf08cc0b86a01f7014939ffcb4471a7148629dff 369152 nginx-light_1.9.10-1~bpo8+4_amd64.deb
5fbd2bebd672c670b57d6bd1811f049b06c80a42 2284298 nginx-light-dbg_1.9.10-1~bpo8+4_amd64.deb
0b55df4815cb919012c047ae159bdd00ebb5bd2c 690476 nginx-extras_1.9.10-1~bpo8+4_amd64.deb
6117e021f9ecdc3d3dbfdf5d6058e90a323f0112 5587810 nginx-extras-dbg_1.9.10-1~bpo8+4_amd64.deb
Checksums-Sha256:
5b41779a520d3e3e6020cbe8a37b7809877e9e2e76f72c9a402e33d3b15402db 2853 nginx_1.9.10-1~bpo8+4.dsc
f996860814bfa9256f5c4053924026fedc7b6370b59b22811706b1da2a926867 647100 nginx_1.9.10-1~bpo8+4.debian.tar.xz
f1e32d7349acb0db071ce33b2315bd81d76be0beb5b613f9f46c119fd78bac2a 78186 nginx_1.9.10-1~bpo8+4_all.deb
f4bba231315b0c7119468a7f92d415dd7bcdbcfa477021a26b6ad8f0eed3c841 89660 nginx-doc_1.9.10-1~bpo8+4_all.deb
6c6336b5d43cd5a5a1b397fc226bd0fbc3d26db94c347df3dc9f3d2ec73faa04 99574 nginx-common_1.9.10-1~bpo8+4_all.deb
c9c53d78e1c7c30a9c2d3670421f813450fb363c4a7181b28984d3f38328333a 499952 nginx-full_1.9.10-1~bpo8+4_amd64.deb
888995a666b7b0e9d7ba80a66070fce30d66d2046f224f8719e3e229baef750e 3571366 nginx-full-dbg_1.9.10-1~bpo8+4_amd64.deb
76f43d5f071f22433d83c6f5fb8787ffb5311c730bdb9c5adfd945b8f5643a86 369152 nginx-light_1.9.10-1~bpo8+4_amd64.deb
0263d9258515d90c8d33d75e96634b120aca7d050c0da702cd247b470707cb4e 2284298 nginx-light-dbg_1.9.10-1~bpo8+4_amd64.deb
54d91c8709fcd1d434bfde1babfc72d96962212426ee2dec629cea246da31a6c 690476 nginx-extras_1.9.10-1~bpo8+4_amd64.deb
066d8924fb051c4595e330ddd02398d6d07f94fad646cf5e9bb13fe9ae85ff8f 5587810 nginx-extras-dbg_1.9.10-1~bpo8+4_amd64.deb
Files:
24123b10eb139239dc9a34a968aed313 2853 httpd optional nginx_1.9.10-1~bpo8+4.dsc
0c49436797a03da6a15d5922be79611c 647100 httpd optional nginx_1.9.10-1~bpo8+4.debian.tar.xz
277f7d25ade1f44b30a625afc06574a7 78186 httpd optional nginx_1.9.10-1~bpo8+4_all.deb
a78dea7e508e4db1b47e4490a97f7284 89660 doc optional nginx-doc_1.9.10-1~bpo8+4_all.deb
d8625c558498dc582568bccc3958d7b0 99574 httpd optional nginx-common_1.9.10-1~bpo8+4_all.deb
2d5e5cdfab84bafa6bc7f29d64c6141e 499952 httpd optional nginx-full_1.9.10-1~bpo8+4_amd64.deb
995bd7a57000aa34ceaba19b11734828 3571366 debug extra nginx-full-dbg_1.9.10-1~bpo8+4_amd64.deb
abb840ce3b394018535661ea6bc8df86 369152 httpd extra nginx-light_1.9.10-1~bpo8+4_amd64.deb
e823d147c45438a21ca1e045d56a7cf5 2284298 debug extra nginx-light-dbg_1.9.10-1~bpo8+4_amd64.deb
8ad2dc3311eefcdbf564bed4171fd480 690476 httpd extra nginx-extras_1.9.10-1~bpo8+4_amd64.deb
ba794f51244ebedbf6beb4ea1fe01ce2 5587810 debug extra nginx-extras-dbg_1.9.10-1~bpo8+4_amd64.deb
-----BEGIN PGP SIGNATURE-----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=32tg
-----END PGP SIGNATURE-----
Reply to: