Format: 1.8 Date: Tue, 06 Nov 2018 13:55:13 -0500 Source: nginx Binary: nginx nginx-doc nginx-common nginx-core nginx-core-dbg nginx-full nginx-full-dbg nginx-light nginx-light-dbg nginx-extras nginx-extras-dbg Architecture: ppc64el ppc64el_translations Version: 1.10.3-0ubuntu0.16.04.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-core - nginx web/proxy server (core version) nginx-core-dbg - nginx web/proxy server (core version) - debugging symbols nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-extras-dbg - nginx web/proxy server (extended version) - debugging symbols nginx-full - nginx web/proxy server (standard version) nginx-full-dbg - nginx web/proxy server (standard version) - debugging symbols nginx-light - nginx web/proxy server (basic version) nginx-light-dbg - nginx web/proxy server (basic version) - debugging symbols Changes: nginx (1.10.3-0ubuntu0.16.04.3) xenial-security; urgency=medium . * SECURITY UPDATE: excessive memory consumption in HTTP/2 implementation - debian/patches/CVE-2018-16843.patch: add flood detection in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h. - CVE-2018-16843 * SECURITY UPDATE: excessive CPU usage in HTTP/2 implementation - debian/patches/CVE-2018-16844-pre.patch: backport new http2_max_requests directive. - debian/patches/CVE-2018-16844.patch: limit the number of idle state switches in src/http/v2/ngx_http_v2.c, src/http/v2/ngx_http_v2.h. - CVE-2018-16844 * SECURITY UPDATE: infinite loop in ngx_http_mp4_module - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in src/http/modules/ngx_http_mp4_module.c. - CVE-2018-16845 Checksums-Sha1: 79d5e52ca3579d8aa1be2b11fdedc7f5de17c7b8 3475040 nginx-core-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 0e6c2e316ac0a50c942d3e96330febb7763cebec 1350 nginx-core-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 8779dd4e7176ef4c54c79dd21353b0613d6f56cf 417984 nginx-core_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 8d77bf552731b5946870a4fc982cbc8b6b6b5970 6088724 nginx-extras-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 087278f2bb691ea5304479df7d1b4cd10cf13923 1436 nginx-extras-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 55607040a872325ce123342d085aad3bd11963e7 610658 nginx-extras_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 6dfd2ba1ae958d9ed21b6510332a5bee1a8b3b58 3928932 nginx-full-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb abecc58990d351c84d1d65a5b6b47f8ae7ad84d4 1350 nginx-full-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 5453fbb40b8c89e9de1336e418b223e467c6b979 441772 nginx-full_1.10.3-0ubuntu0.16.04.3_ppc64el.deb fab61f8439166f626298d3383b2cba648d645f0e 2490926 nginx-light-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 221db6230ae4a4a36896c4623a8919fbdedc8618 1146 nginx-light-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 12cb999c28d4e498b315d59ecf51a38978a6e62a 307974 nginx-light_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 776e56d290ea19a5e87c2a8bdb032d31d3409444 905 nginx_1.10.3-0ubuntu0.16.04.3_ppc64el_translations.tar.gz Checksums-Sha256: 368f77e2982396892fe740a3515858e6130ddab68da5813dfaa4348dc2758569 3475040 nginx-core-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 359e47ebcba92275c6272d7a7b67d449e7b297c9033b611539406393332a8708 1350 nginx-core-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 7b3ebe5bf9c7a5d4de354165985795494cbf70612e8b3f8a5537d3fae78fcd25 417984 nginx-core_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 63a044a7eae2981ade09593a3e64a0d3d7c9b0c298e87bb702187e8999244487 6088724 nginx-extras-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 77ccb437019d7e822da83ebd788c4402d821d751f6975a918baf6c06e1f665cb 1436 nginx-extras-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 4df25119f6941a9b0bba6b7c57f25465be6161b2543d4818a1442f112fde2d15 610658 nginx-extras_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 5df142e5c3c75504ce8f09b861c97994af4a82d2f12f7c8f84def1bde275926c 3928932 nginx-full-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb fa77cc5fd232731eebbd51562b5404c0a20349dbedd47f6e6e7add55fea3b99e 1350 nginx-full-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 8881923bea738fd2605a9af366e622bf7e79c9cc90eb212fccbe8cfe75c9320e 441772 nginx-full_1.10.3-0ubuntu0.16.04.3_ppc64el.deb e55a9c5274eaebeac1a283d1948af1ed6b926812c6b4840ce0b7818c7a02391e 2490926 nginx-light-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb ed3acd561afae91d2f272441f53a47fe51c1a80b16ff36ee599af60cadc4e044 1146 nginx-light-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb a446a5902507122c8d5112c53ee77fa9d0b4bc3d588c431f012c8edc6683692f 307974 nginx-light_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 630a509f3df67dd4045f3ab49bf038503f244f75ced98d0115473305c164ca77 905 nginx_1.10.3-0ubuntu0.16.04.3_ppc64el_translations.tar.gz Files: 443d235712127cdd1a0afde57658c18c 3475040 debug extra nginx-core-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 6d38f8d3e0bd4c2789906265ac6fbcf4 1350 httpd extra nginx-core-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 4e90f5204cd132b46054d4ff930b4036 417984 httpd optional nginx-core_1.10.3-0ubuntu0.16.04.3_ppc64el.deb ce7fc2d74a15abd2f9af6a22510d0e83 6088724 debug extra nginx-extras-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb a581db30c1278ad3a46be3090ce872ed 1436 httpd extra nginx-extras-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 6fc565f6eeb62c050d427570260a7431 610658 httpd extra nginx-extras_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 0c324361c67fae0b059a0f033afa3202 3928932 debug extra nginx-full-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 82a108bf92a9555d9021c5d0213a7b9d 1350 httpd extra nginx-full-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 14b110cdeec6214e16ede13c499bdcb3 441772 httpd optional nginx-full_1.10.3-0ubuntu0.16.04.3_ppc64el.deb be90f8ef0b9ef87f315612990218a9ae 2490926 debug extra nginx-light-dbg_1.10.3-0ubuntu0.16.04.3_ppc64el.deb c11d5651ba10c1e932bae3ad451e2e84 1146 httpd extra nginx-light-dbgsym_1.10.3-0ubuntu0.16.04.3_ppc64el.ddeb 4162527f1791b3e085cd02bed0c8dc5f 307974 httpd extra nginx-light_1.10.3-0ubuntu0.16.04.3_ppc64el.deb 76f648bebcb1b03c249cd75b0daf9442 905 raw-translations - nginx_1.10.3-0ubuntu0.16.04.3_ppc64el_translations.tar.gz Original-Maintainer: Kartik Mistry