Format: 1.8 Date: Tue, 18 Oct 2016 11:12:58 +0200 Source: nginx Binary: nginx nginx-doc nginx-common nginx-core nginx-core-dbg nginx-full nginx-full-dbg nginx-light nginx-light-dbg nginx-extras nginx-extras-dbg nginx-naxsi nginx-naxsi-dbg nginx-naxsi-ui Architecture: ppc64el ppc64el_translations Version: 1.4.6-1ubuntu3.6 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-core - nginx web/proxy server (core version) nginx-core-dbg - nginx web/proxy server (core version) - debugging symbols nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-extras-dbg - nginx web/proxy server (extended version) - debugging symbols nginx-full - nginx web/proxy server (standard version) nginx-full-dbg - nginx web/proxy server (standard version) - debugging symbols nginx-light - nginx web/proxy server (basic version) nginx-light-dbg - nginx web/proxy server (basic version) - debugging symbols nginx-naxsi - nginx web/proxy server (version with naxsi) nginx-naxsi-dbg - nginx web/proxy server (version with naxsi) - debugging symbols nginx-naxsi-ui - nginx web/proxy server - naxsi configuration front-end Changes: nginx (1.4.6-1ubuntu3.6) trusty-security; urgency=medium . [ Christos Trochalakis ] * debian/nginx-common.postinst: + Secure log file handling (owner & permissions) against privilege escalation attacks. /var/log/nginx is now owned by root:adm. Thanks Dawid Golunski (http://legalhackers.com) for the report. Changing /var/log/nginx permissions effectively reopens #701112, since log files can be world-readable. This is a trade-off until a better log opening solution is implemented upstream (trac:376). Checksums-Sha1: 68cbc0393f4722f22ed04ff835781e7e5a13ea9a 297166 nginx-core_1.4.6-1ubuntu3.6_ppc64el.deb 5e248224d21c2f942be5ca5726519c09752019bb 2724474 nginx-core-dbg_1.4.6-1ubuntu3.6_ppc64el.deb df9b14e82e0c3d775e30261d448388a1f60ea96b 314124 nginx-full_1.4.6-1ubuntu3.6_ppc64el.deb 037228391b16ecda484f4b9d244d0ce6f609144a 3143370 nginx-full-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 0f817cafd91fa206188bfd188df981ad6fa3f122 232020 nginx-light_1.4.6-1ubuntu3.6_ppc64el.deb d481ec7b909f1d369d2a0cd23af4d15af0f8321e 2134936 nginx-light-dbg_1.4.6-1ubuntu3.6_ppc64el.deb c20be0f30fc5b422c9eaf6b7c7936fe4523055be 453240 nginx-extras_1.4.6-1ubuntu3.6_ppc64el.deb 0901a2ff2ef19af2b45c3241e15ef6650082743b 4856376 nginx-extras-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 6b5349aaa007cd188a0c35c419dd8f0ca2b46983 265030 nginx-naxsi_1.4.6-1ubuntu3.6_ppc64el.deb b0ebc087cd306e24df8e439a9f502cb81d16a81f 2281048 nginx-naxsi-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 621fe95697700f072bd44d75c5f13200736d567d 1332 nginx-core-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 0cb28f420daaa1067c1cad962915a70fda00f9ed 1330 nginx-full-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb f2e309b7bf39105e8f1be410938fcb8f75ab07b4 1138 nginx-light-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb f6d0e8365e8b19c2faba40ca6f50378882b063ef 1422 nginx-extras-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 1128a99549732f4007f25e8257845ef0cd33ac2c 1202 nginx-naxsi-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 17c180eff2328297f1cc6fc6b963676a69b82e18 4552 nginx_1.4.6-1ubuntu3.6_ppc64el_translations.tar.gz Checksums-Sha256: 7f91181615af3568aa299d1292a08f8cd107c03268cea832fb1c884b15bfff07 297166 nginx-core_1.4.6-1ubuntu3.6_ppc64el.deb 5218df96629b98d1e70253df092f7fa85861f7b9895b85c6229c06f0db85d65b 2724474 nginx-core-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 2e29c620a937e68c7beb15993adb40064bfaf0148d708d0c850cc80c0af23f1f 314124 nginx-full_1.4.6-1ubuntu3.6_ppc64el.deb 8fa43635d787f7256f4af0da58449edde6df29bec0ef174bb99d61bac15d3e34 3143370 nginx-full-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 26265c0cc5885c71d0ff7bc9ba2c8c326e2fcc6764f7e3dfdb0bd580be71a611 232020 nginx-light_1.4.6-1ubuntu3.6_ppc64el.deb f1fb427fc01255533ac30e02f5aaa01b7e6d77cc405a3297934e60ebc48d57c3 2134936 nginx-light-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 0ab094f5366053544f2392e9b53a630ffe15e9f8db3c634e6070350d7462a71d 453240 nginx-extras_1.4.6-1ubuntu3.6_ppc64el.deb 6bcaa3205506076c969e85f56c7b3f587c9a55004c969bfd63dcde1d4b1c9a15 4856376 nginx-extras-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 2e4fbc9ee169c81248d6393b7063f73e67dc977e300e5bc4ee5e422db2743ba4 265030 nginx-naxsi_1.4.6-1ubuntu3.6_ppc64el.deb dedf5d87147e5f5f9c58cdf6bb3d923ad1063a38d72eb5026f6cafc8c917f6bc 2281048 nginx-naxsi-dbg_1.4.6-1ubuntu3.6_ppc64el.deb a84df9a980fa79a0f45a98f9cec57b4881b5a403601c1dcfbe076032a55155bd 1332 nginx-core-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb bbd2cce556a519e5af99dae0ff8f0718d201b14e8c7716aca4c8f4d87b1c7940 1330 nginx-full-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb f771e979ea3a4eeb412c4c040d56e4be395043b46899442abeb930c63b9eb12e 1138 nginx-light-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb a59c72778ad295c47d5e3609d6f2d748e74123f3dae584c6d4548a6d4036be58 1422 nginx-extras-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 371a0caa1f8ff5a51bc6816d093def99ea92b21b73bc2f9092d05e5fb721a006 1202 nginx-naxsi-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 21d28707b1d1c0dfe02914f71ce1866570ff912ea4d98b25773196d66717b3be 4552 nginx_1.4.6-1ubuntu3.6_ppc64el_translations.tar.gz Files: a6324ce820536d52400bf157c9b30910 297166 httpd optional nginx-core_1.4.6-1ubuntu3.6_ppc64el.deb 593632b20b591099198b7a503f4e1979 2724474 debug extra nginx-core-dbg_1.4.6-1ubuntu3.6_ppc64el.deb a825a173d7d66e368e6284b41ae017d5 314124 httpd optional nginx-full_1.4.6-1ubuntu3.6_ppc64el.deb c4fd91594654136c4517648eaf081fca 3143370 debug extra nginx-full-dbg_1.4.6-1ubuntu3.6_ppc64el.deb ec7114061c663d0643094a30a47e6cd7 232020 httpd extra nginx-light_1.4.6-1ubuntu3.6_ppc64el.deb f752c3dc834c2deb1ae91ea672c9e9c7 2134936 debug extra nginx-light-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 67529b89238ae867cbe5300c129e4c1f 453240 httpd extra nginx-extras_1.4.6-1ubuntu3.6_ppc64el.deb b68d65d643e33eb5f6efc0c901eed1ef 4856376 debug extra nginx-extras-dbg_1.4.6-1ubuntu3.6_ppc64el.deb adcebdcf980641e5d9f35a9dd204f8cb 265030 httpd extra nginx-naxsi_1.4.6-1ubuntu3.6_ppc64el.deb c34c7fd68522f3be8cd7e35b9911e773 2281048 debug extra nginx-naxsi-dbg_1.4.6-1ubuntu3.6_ppc64el.deb 8b34547aa8649ab63627d404fb03f8fd 1332 httpd extra nginx-core-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 64375131eaff9a1d9fd84f5e5a7a0ee6 1330 httpd extra nginx-full-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb b6840d17135356291f0efafe3b32b8ed 1138 httpd extra nginx-light-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 445cba500f003a8a9b75e3092b6023aa 1422 httpd extra nginx-extras-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 2654ec92c940ad323f6eb217433aec32 1202 httpd extra nginx-naxsi-dbgsym_1.4.6-1ubuntu3.6_ppc64el.ddeb 15524b599cff0c0f6285a75e12a13488 4552 raw-translations - nginx_1.4.6-1ubuntu3.6_ppc64el_translations.tar.gz Original-Maintainer: Kartik Mistry