Accepted nginx 1.14.2-3 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 19 Aug 2019 11:30:08 +0300
Source: nginx
Architecture: source
Version: 1.14.2-3
Distribution: unstable
Urgency: high
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net>
Changed-By: Christos Trochalakis <ctrochalakis@debian.org>
Closes: 935037
Changes:
nginx (1.14.2-3) unstable; urgency=high
.
* Backport upstream fixes for 3 CVEs (Closes: #935037)
Those fixes affect Nginx HTTP/2 implementation, which might cause
excessive memory consumption and CPU usage.
(CVE-2019-9511, CVE-2019-9513, CVE-2019-9516).
Checksums-Sha1:
a88dbf47cde24a040af9359704e54e3f41b9b186 4149 nginx_1.14.2-3.dsc
0285ab4a477eba8a0b849beeb1ddd7dd5adf463a 930492 nginx_1.14.2-3.debian.tar.xz
0cf38803ebb320ba32dcd560a0c54b1cad23f4fd 22111 nginx_1.14.2-3_amd64.buildinfo
Checksums-Sha256:
9b0ef5ac174928107647794875903db684a28447ed683c6e84e9280756eb46b2 4149 nginx_1.14.2-3.dsc
b252e5a20bfc89891814f9d98fe1654ebf19249e315f4b0bb4f8deb93aebd49b 930492 nginx_1.14.2-3.debian.tar.xz
36da7bab635e3b6ab095cfce2eed91d28998085c4444e2347697a8105e7e5c93 22111 nginx_1.14.2-3_amd64.buildinfo
Files:
e966afc7e9b96decdd00184d8ca61959 4149 httpd optional nginx_1.14.2-3.dsc
3d6aa011b541b79d828b71ce777693a7 930492 httpd optional nginx_1.14.2-3.debian.tar.xz
e12318c452b9677ebe19fb502aac29d2 22111 httpd optional nginx_1.14.2-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEf2SPbCEjyY+zKcgrETYmAKdH7NkFAl1aYPcACgkQETYmAKdH
7NnU2Q//dGY+j/Vm1pJQkD7Swx17lmERzAiFImV2c6k/LJFO9cbbfjNUjtguf0Rv
j9SwuXcqrO4PNI+spd7Ai1dWftUaRosA9CYvAQP+fdbiG9oDj77g0vQ7je+Pn7uA
PfFKScAkiXoLanmqZlt+9v34pImX/UHo7Hau1hV3KyPIg5OHadbR0nwUeuC3ti+5
JQ3zmPmfhQIDWQgco764A7EX8Q1QTM0v4q63GncCCULlcWwfLhpA9a2nln+pEVVf
V/QDcmnDx8QzWkSErl2T6q3f4x56bJlJpJO/T7yv6E3PX1f8xEVoJ+CBEW/3twC5
5pCS71TvEwMRv2hQs/KkroMxpIkfgf9fIW9ZroJjDY3P8J/SYMlebrDXQh81IJri
C1J0bgCPUUHwpFblixRJgAs54cgT8fF6KVWWwiGOWcEqMAo44vPxkWS9LDo73TWp
+QqOgc+QDv5BHlxSWlxx/LijjXZ6RZDuWgpddZGXyFFZ+YLAXM7fBPoUv4B6ABAL
xJllP3suRg5gDi6efJ8s0Sbibbc2ALdXDPOCG4Z+dTI7GMs+hRxiOspE+xCiD/A0
eNmygh/zfPVBKB3W+sJfIJSP00cKGVC/h9Snzi9Da0I4HKQq9agUb+CuZdgGsa1l
+ilEjh9oZUeJeBfw8R99aHnK4VS3JxLrPISyR0PABx+Q3pLRUWo=
=r1D6
-----END PGP SIGNATURE-----