From 5b6c245592ee61764ea243f5df3944d5c90087a80abaccf3496776f9ce6e99a9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=98=D0=BB=D1=8C=D1=8F=20=D0=98=D0=BD=D0=B4=D0=B8=D0=B3?= =?UTF-8?q?=D0=BE?= Date: Wed, 26 May 2021 02:51:51 +0000 Subject: [PATCH] Accepting request 895436 from home:13ilya:branches:server:http - Update to 1.20.1 * https://nginx.org/en/CHANGES * 1-byte memory overwrite might occur during DNS server response processing if the "resolver" directive was used, allowing an attacker who is able to forge UDP packets from the DNS server to cause worker process crash or, potentially, arbitrary code execution (CVE-2021-23017). OBS-URL: https://build.opensuse.org/request/show/895436 OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=203 --- nginx-1.20.0.tar.gz | 3 --- nginx-1.20.0.tar.gz.asc | 10 ---------- nginx-1.20.1.tar.gz | 3 +++ nginx-1.20.1.tar.gz.asc | 10 ++++++++++ nginx.changes | 10 ++++++++++ nginx.spec | 4 ++-- 6 files changed, 25 insertions(+), 15 deletions(-) delete mode 100644 nginx-1.20.0.tar.gz delete mode 100644 nginx-1.20.0.tar.gz.asc create mode 100644 nginx-1.20.1.tar.gz create mode 100644 nginx-1.20.1.tar.gz.asc diff --git a/nginx-1.20.0.tar.gz b/nginx-1.20.0.tar.gz deleted file mode 100644 index ef81fb3..0000000 --- a/nginx-1.20.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:54ef91ec8ebcaa486c640c09c92d832eaeaff149b10ee52ef140f407b1b04d1c -size 1061070 diff --git a/nginx-1.20.0.tar.gz.asc b/nginx-1.20.0.tar.gz.asc deleted file mode 100644 index a2e8e4a..0000000 --- a/nginx-1.20.0.tar.gz.asc +++ /dev/null @@ -1,10 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQEcBAABCAAGBQJgfue4AAoJEFIKmZOhwFL4SkkH/jpg8qiBxqdgDe1YC2dxsoPf -/a97suEIf89J3Wxor5JuhTWnGz9sMSl7z3/dGyuOp6kqVPFG9Kei3YA7fVO6wMa7 -4sy+L/zugnnoiDtJ3f7s4GjMs4ohWV8T9+G8IJBtvAPLYQxtqGj4kDBJbuqgHSEw -/yO0otZ0igGecgIdOGOU85Jx6NxVwK3aXE7BUpMNFqpuJ1qbSDqaNnEXg9geGVm4 -eUIkfsEhyIHCpYmY21OSH+Dbcdy2Nqtc7ZTSdl7jsvefMCVDcOd0/i/ZYTRfOxE0 -n/OsTOjOrgkY6KxjcJMdQyO4jhgS0n1Z5yntVskyONxfJbwlExERD62XRfHlA78= -=EpMI ------END PGP SIGNATURE----- diff --git a/nginx-1.20.1.tar.gz b/nginx-1.20.1.tar.gz new file mode 100644 index 0000000..873d50a --- /dev/null +++ b/nginx-1.20.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e462e11533d5c30baa05df7652160ff5979591d291736cfa5edb9fd2edb48c49 +size 1061461 diff --git a/nginx-1.20.1.tar.gz.asc b/nginx-1.20.1.tar.gz.asc new file mode 100644 index 0000000..c1dd169 --- /dev/null +++ b/nginx-1.20.1.tar.gz.asc @@ -0,0 +1,10 @@ +-----BEGIN PGP SIGNATURE----- + +iQEcBAABCAAGBQJgrPDQAAoJEFIKmZOhwFL4dlIH/RFvUn4wiazXVujdm1df2/Q5 +b+NVlr+O9WZ2Mb35dooOshG/G2wVjI95Cd5NU6svulJ05uv6tGgHA0CUZP6PLqIm +4os5QcgbEbfdDbfQEw7wyc831DqiBPwzk/xt954vsqwzX3mkXvUNTEYpynguwN1J +2iMb/bFRSlLZkKGbKOmLMO7iav0r88qtpmQIzG1mFTDg3leH0q3hEMAJl7pIicYd +Of3+/EHnM8CXORtA1q6YTLbcHAzhSmjdrMyw+RQGQkxoPtdj9vwL4Z6Wk8+6dDK7 +dVBaiKp80tDM/iJizPbkbrBVbnR/9W48+QBC7tmOJMuj2c1Q/kvwJg9CLyHlqCU= +=tPti +-----END PGP SIGNATURE----- diff --git a/nginx.changes b/nginx.changes index 9003a44..7813f90 100644 --- a/nginx.changes +++ b/nginx.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Wed May 26 02:44:27 UTC 2021 - Илья Индиго + +- Update to 1.20.1 + * https://nginx.org/en/CHANGES + * 1-byte memory overwrite might occur during DNS server response processing + if the "resolver" directive was used, allowing an attacker who is able to + forge UDP packets from the DNS server to cause worker process crash or, + potentially, arbitrary code execution (CVE-2021-23017). + ------------------------------------------------------------------- Wed Apr 21 04:54:21 UTC 2021 - Andreas Stieger diff --git a/nginx.spec b/nginx.spec index 350ef24..4dbe5b1 100644 --- a/nginx.spec +++ b/nginx.spec @@ -23,7 +23,7 @@ %bcond_with ngx_google_perftools # Name: nginx -Version: 1.20.0 +Version: 1.20.1 Release: 0 Summary: A HTTP server and IMAP/POP3 proxy server License: BSD-2-Clause @@ -83,8 +83,8 @@ It has been running on many heavily loaded Russian sites for more than two years Summary: VIM support for nginx config files Group: Productivity/Text/Editors %requires_eq vim -BuildArch: noarch Supplements: (nginx and vim_client) +BuildArch: noarch %description -n vim-plugin-nginx nginx [engine x] is a HTTP server and IMAP/POP3 proxy server written by Igor Sysoev.