Accepted nginx 1.14.2-2+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 20 Aug 2019 11:22:25 EEST
Source: nginx
Architecture: source
Version: 1.14.2-2+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers@alioth-lists.debian.net>
Changed-By: Christos Trochalakis <ctrochalakis@debian.org>
Closes: 935037
Changes:
nginx (1.14.2-2+deb10u1) buster-security; urgency=high
.
* Backport upstream fixes for 3 CVEs (Closes: #935037)
Those fixes affect Nginx HTTP/2 implementation, which might cause
excessive memory consumption and CPU usage.
(CVE-2019-9511, CVE-2019-9513, CVE-2019-9516).
Checksums-Sha256:
8935b5c2112c455de7ce7ba72775c0a7bd78d81f414cef937ff9f1387f724add 4181 nginx_1.14.2-2+deb10u1.dsc
4ef00aec16c1e8a06b601ed289186c0c2f62a64bc26ac2d90ece206e1bf5414c 930528 nginx_1.14.2-2+deb10u1.debian.tar.xz
002d9f6154e331886a2dd4e6065863c9c1cf8291ae97a1255308572c02be9797 1015384 nginx_1.14.2.orig.tar.gz
Checksums-Sha1:
323d63f03ee782b1df9ed7224ad3be55bd3a9eda 4181 nginx_1.14.2-2+deb10u1.dsc
06747ed005f581034b6474de27904ace0bb9d52d 930528 nginx_1.14.2-2+deb10u1.debian.tar.xz
4b4df8786b44e79cffd2e002a070e27fd774a17f 1015384 nginx_1.14.2.orig.tar.gz
Files:
781029f4e8afd93c1adb17e37ceecc4f 4181 httpd optional nginx_1.14.2-2+deb10u1.dsc
46b6ddee759e727c57bcf688abc2f8d1 930528 httpd optional nginx_1.14.2-2+deb10u1.debian.tar.xz
239b829a13cea1d244c1044e830bd9c2 1015384 httpd optional nginx_1.14.2.orig.tar.gz
-----BEGIN PGP SIGNATURE-----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=YNLV
-----END PGP SIGNATURE-----