From 1b479254219032cf7abc24d5a9d44301e386ffb97419575c2074bef60cdee8c6 Mon Sep 17 00:00:00 2001 From: Marcus Rueckert Date: Mon, 17 Jul 2017 11:02:44 +0000 Subject: [PATCH] - update to 1.13.3 (boo#1048265) - Security: a specially crafted request might result in an integer overflow and incorrect processing of ranges in the range filter, potentially resulting in sensitive information leak (CVE-2017-7529). - changes from 1.13.2 - Change: nginx now returns 200 instead of 416 when a range starting with 0 is requested from an empty file. - Feature: the "add_trailer" directive. Thanks to Piotr Sikora. - Bugfix: nginx could not be built on Cygwin and NetBSD; the bug had appeared in 1.13.0. - Bugfix: nginx could not be built under MSYS2 / MinGW 64-bit. Thanks to Orgad Shaneh. - Bugfix: a segmentation fault might occur in a worker process when using SSI with many includes and proxy_pass with variables. - Bugfix: in the ngx_http_v2_module. Thanks to Piotr Sikora. - update nginx-rtmp-module to 1.2.0: - DASH improvements - OpenSSL 1.1 compatibility OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=86 --- nginx-1.13.1.tar.gz | 3 --- nginx-1.13.3.tar.gz | 3 +++ nginx-rtmp-module-1.1.10.tar.gz | 3 --- nginx-rtmp-module-1.2.0.tar.gz | 3 +++ nginx.changes | 24 ++++++++++++++++++++++++ nginx.spec | 4 ++-- 6 files changed, 32 insertions(+), 8 deletions(-) delete mode 100644 nginx-1.13.1.tar.gz create mode 100644 nginx-1.13.3.tar.gz delete mode 100644 nginx-rtmp-module-1.1.10.tar.gz create mode 100644 nginx-rtmp-module-1.2.0.tar.gz diff --git a/nginx-1.13.1.tar.gz b/nginx-1.13.1.tar.gz deleted file mode 100644 index 21e44f5..0000000 --- a/nginx-1.13.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a5856c72a6609a4dc68c88a7f3c33b79e6693343b62952e021e043fe347b6776 -size 984142 diff --git a/nginx-1.13.3.tar.gz b/nginx-1.13.3.tar.gz new file mode 100644 index 0000000..cc45f24 --- /dev/null +++ b/nginx-1.13.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5b73f98004c302fb8e4a172abf046d9ce77739a82487e4873b39f9b0dcbb0d72 +size 985931 diff --git a/nginx-rtmp-module-1.1.10.tar.gz b/nginx-rtmp-module-1.1.10.tar.gz deleted file mode 100644 index 34f3bbf..0000000 --- a/nginx-rtmp-module-1.1.10.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f9491dd24390b0d5d70dfe3553edf3d14efeb7c7a81b4d4a20c5cfeaefc1141c -size 519877 diff --git a/nginx-rtmp-module-1.2.0.tar.gz b/nginx-rtmp-module-1.2.0.tar.gz new file mode 100644 index 0000000..739187f --- /dev/null +++ b/nginx-rtmp-module-1.2.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a8026f5ade30b178a06f12c46dff053cfe12256016ad465a46646183086b16b0 +size 519895 diff --git a/nginx.changes b/nginx.changes index 813f980..59a3ae2 100644 --- a/nginx.changes +++ b/nginx.changes @@ -1,3 +1,27 @@ +------------------------------------------------------------------- +Mon Jul 17 10:58:21 UTC 2017 - mrueckert@suse.de + +- update to 1.13.3 (boo#1048265) + - Security: a specially crafted request might result in an + integer overflow and incorrect processing of ranges in the + range filter, potentially resulting in sensitive information + leak (CVE-2017-7529). +- changes from 1.13.2 + - Change: nginx now returns 200 instead of 416 when a range + starting with 0 is requested from an empty file. + - Feature: the "add_trailer" directive. Thanks to Piotr Sikora. + - Bugfix: nginx could not be built on Cygwin and NetBSD; the bug + had appeared in 1.13.0. + - Bugfix: nginx could not be built under MSYS2 / MinGW 64-bit. + Thanks to Orgad Shaneh. + - Bugfix: a segmentation fault might occur in a worker process + when using SSI with many includes and proxy_pass with + variables. + - Bugfix: in the ngx_http_v2_module. Thanks to Piotr Sikora. +- update nginx-rtmp-module to 1.2.0: + - DASH improvements + - OpenSSL 1.1 compatibility + ------------------------------------------------------------------- Thu Jun 1 10:05:49 UTC 2017 - mrueckert@suse.de diff --git a/nginx.spec b/nginx.spec index 2606e18..79c0782 100644 --- a/nginx.spec +++ b/nginx.spec @@ -64,7 +64,7 @@ %define ngx_doc_dir %{_datadir}/doc/packages/%{name} # Name: nginx -Version: 1.13.1 +Version: 1.13.3 Release: 0 %define ngx_fancyindex_version 0.4.1 %define ngx_fancyindex_module_path ngx-fancyindex-%{ngx_fancyindex_version} @@ -75,7 +75,7 @@ Release: 0 %define nginx_upstream_check_version 0.3.0 %define nginx_upstream_check_module_path nginx_upstream_check_module-%{nginx_upstream_check_version} -%define nginx_rtmp_version 1.1.10 +%define nginx_rtmp_version 1.2.0 %define nginx_rtmp_module_path nginx-rtmp-module-%{nginx_rtmp_version} Summary: A HTTP server and IMAP/POP3 proxy server