Format: 1.8 Date: Tue, 18 Oct 2016 11:02:16 +0200 Source: nginx Binary: nginx nginx-doc nginx-common nginx-core nginx-core-dbg nginx-full nginx-full-dbg nginx-light nginx-light-dbg nginx-extras nginx-extras-dbg Architecture: all amd64 amd64_translations Version: 1.10.0-0ubuntu0.16.04.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalable web/proxy server - common files nginx-core - nginx web/proxy server (core version) nginx-core-dbg - nginx web/proxy server (core version) - debugging symbols nginx-doc - small, powerful, scalable web/proxy server - documentation nginx-extras - nginx web/proxy server (extended version) nginx-extras-dbg - nginx web/proxy server (extended version) - debugging symbols nginx-full - nginx web/proxy server (standard version) nginx-full-dbg - nginx web/proxy server (standard version) - debugging symbols nginx-light - nginx web/proxy server (basic version) nginx-light-dbg - nginx web/proxy server (basic version) - debugging symbols Changes: nginx (1.10.0-0ubuntu0.16.04.3) xenial-security; urgency=medium . [ Christos Trochalakis ] * debian/nginx-common.postinst: + Secure log file handling (owner & permissions) against privilege escalation attacks. /var/log/nginx is now owned by root:adm. Thanks Dawid Golunski (http://legalhackers.com) for the report. Changing /var/log/nginx permissions effectively reopens #701112, since log files can be world-readable. This is a trade-off until a better log opening solution is implemented upstream (trac:376). * debian/control: Don't allow building against liblua5.1-0-dev on architectures that libluajit is available. Checksums-Sha1: 39b4de7446a30f17821fd94edf284a91dd3bc5a4 26930 nginx-common_1.10.0-0ubuntu0.16.04.3_all.deb c81fff0884f5ec5cde1d51b5121c63cd314eadb5 3331400 nginx-core-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb f576d1072a209e28453986411bf4e611d6c3a7e8 1350 nginx-core-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 10a55ca1e0445efc11eafb27341eaa9cd929dec6 428048 nginx-core_1.10.0-0ubuntu0.16.04.3_amd64.deb a11a34f13f47893b4c97fab98dc369475d383725 16988 nginx-doc_1.10.0-0ubuntu0.16.04.3_all.deb 295bbc8ada6cb54992316c35cf53c81bace89a18 5897184 nginx-extras-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb b8d45ba5b984373425d722d4108f8c3071be3472 1432 nginx-extras-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb affd049e8f1e24e5695e2ebc4e705cdad4f40dfa 629634 nginx-extras_1.10.0-0ubuntu0.16.04.3_amd64.deb fe75c335371a2239479fc43c070a334d1b6be2a7 3779262 nginx-full-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb 43adac2611f909c839c477cc1e880d6ea6e58b1f 1346 nginx-full-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb c876f035e591e3aa4ea5b1ff142b96944ca5e548 452914 nginx-full_1.10.0-0ubuntu0.16.04.3_amd64.deb c47135ec63fba4b42844e4bee3009dc4609bf58e 2408980 nginx-light-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb f386335b2f9cc1542f9f925c18c2a5a52f4c76ca 1146 nginx-light-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 9123ce6d29abe9996011d9bbec63ab1b8eed83b3 315244 nginx-light_1.10.0-0ubuntu0.16.04.3_amd64.deb dad75dc022c3ed87d2c208adf7c65c0048f38b6d 3496 nginx_1.10.0-0ubuntu0.16.04.3_all.deb 8b8a76143bc904802970031135c8b927c5252b02 904 nginx_1.10.0-0ubuntu0.16.04.3_amd64_translations.tar.gz Checksums-Sha256: f6e1bb5912be31676aee34f1788583ac5e0933c6848572cca6a6d5234f293983 26930 nginx-common_1.10.0-0ubuntu0.16.04.3_all.deb 5414ca6b1610ac5ebe5fdfdf7acd8694b1f41d97390eef4adeb9ccd6d3fd3d2c 3331400 nginx-core-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb ad802269b21115ce8168f52800ee5474e394422b7b1061e8e23280363d417bc3 1350 nginx-core-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 82b12304dbde20c7bb052c92e8bfe46779817eb46fef4ec39ca0f55f2c82d8af 428048 nginx-core_1.10.0-0ubuntu0.16.04.3_amd64.deb 855b531fbafa822ec0855c38cfe846aac58d6fe0876aece2215225098a354bdb 16988 nginx-doc_1.10.0-0ubuntu0.16.04.3_all.deb f9d0b29ef51ba382999dba1c3938b0e5f2bec87f763f0aa3d93d1033f8a56c43 5897184 nginx-extras-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb 4eafdc2467e261a65fe24d4d8ceb02cf847082c7d671d7d7e9d4fd44bcaaea0a 1432 nginx-extras-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 7c44d97aac6fdc6523b7109430a232a8ca6bfb3be6d1f236f3593ebcc7e53bd3 629634 nginx-extras_1.10.0-0ubuntu0.16.04.3_amd64.deb 48434801e7986f5558ff1e02cac8c28e879a4275dbf1aa2500bce6007f1e6e31 3779262 nginx-full-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb 432e72983a436c402185c2b9e4300f4f3d55b5aa75022a0880d71a0a25faaf2d 1346 nginx-full-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 4a01b9bee9ef077246276ba29aa01b59b933a8608d50acc3855df2249b4b2ac8 452914 nginx-full_1.10.0-0ubuntu0.16.04.3_amd64.deb 7dfe1c11c6a427e743708155f7e05dc8f9e4ee30ae4914c3f520bffaa005ebc3 2408980 nginx-light-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb 0a0fe1e9ce6ea51064637f1f9a9badaf74dae237cd6f4d6987570694e3ff3159 1146 nginx-light-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 40eb5b5916a106b384a282f8de2d255a573fb6729ad0ce8ded2e47e83492207e 315244 nginx-light_1.10.0-0ubuntu0.16.04.3_amd64.deb 4f01a3cded1446f3735e9b1ba5d3e2548e8cd7995593980006c62a82740e1180 3496 nginx_1.10.0-0ubuntu0.16.04.3_all.deb 5792b1d5c2d237c68c56c20cb5f2b2abd09a1a9956c199f9776311fd9626b670 904 nginx_1.10.0-0ubuntu0.16.04.3_amd64_translations.tar.gz Files: 6b2be5fe6308be706d5e656dd7e6fe94 26930 httpd optional nginx-common_1.10.0-0ubuntu0.16.04.3_all.deb 75cffb0096e310e90ede0778d8fcb34d 3331400 debug extra nginx-core-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb 776bd7e964612baf3ba0fefd68c4b137 1350 httpd extra nginx-core-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 5891ed52b388d3224ca239fe5960fd67 428048 httpd optional nginx-core_1.10.0-0ubuntu0.16.04.3_amd64.deb ada52232d3f61389b5dfedc5a68f8251 16988 doc optional nginx-doc_1.10.0-0ubuntu0.16.04.3_all.deb 6e57496b8e077a5dd51a5ec4662dcc72 5897184 debug extra nginx-extras-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb a3ad5e961eae2c2e97aa777393f2da89 1432 httpd extra nginx-extras-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 5fe2f67d69076da71123193d1314e0dc 629634 httpd extra nginx-extras_1.10.0-0ubuntu0.16.04.3_amd64.deb a0c60a4fd94d2d5176b8116bb8dc5baa 3779262 debug extra nginx-full-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb d6b7e73f8c7e9d8cf35d75ca262f65c1 1346 httpd extra nginx-full-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb 8a02a869162710f8f009a0ec983eb0f1 452914 httpd optional nginx-full_1.10.0-0ubuntu0.16.04.3_amd64.deb eba9e48d9c06489bed532fee6fab5dea 2408980 debug extra nginx-light-dbg_1.10.0-0ubuntu0.16.04.3_amd64.deb 2d2cc9bf63fdb71d4cfe5c05dcdf22f2 1146 httpd extra nginx-light-dbgsym_1.10.0-0ubuntu0.16.04.3_amd64.ddeb b4b9ca41db8e97d3d073aaa682736b8d 315244 httpd extra nginx-light_1.10.0-0ubuntu0.16.04.3_amd64.deb 97fe711815a452586004adc3682ed7df 3496 httpd optional nginx_1.10.0-0ubuntu0.16.04.3_all.deb 77599ed224419bf71eb1a87a90651913 904 raw-translations - nginx_1.10.0-0ubuntu0.16.04.3_amd64_translations.tar.gz Original-Maintainer: Kartik Mistry