[ubuntu/kinetic-proposed] nginx 1.20.2-2ubuntu1 (Accepted)

Bryce Harrington bryce at canonical.com
Thu Jul 14 19:20:13 UTC 2022


nginx (1.20.2-2ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/p/ubuntu-branding.patch: add Ubuntu branding
    - d/apport/source_nginx.py: Add apport hooks for additional bug
      information gathering.
    - d/nginx-common.install: Add install rule for apport hooks.
    - d/p/nginx-fix-pidfile.patch: Fix NGINX PIDfile handling to avoid
      SystemD race condition - thanks to Tj for the patch.  (LP #1581864)
    - d/control: make nginx and nginx-full arch any, so that nginx-full
      is no longer pulled into main because of i386 (LP #1893267)
    - Remove the Lua modules from NGINX (Server Team Decision) - future support
      for Lua module now requires resty-core from OpenResty, meaning that if
      we want to continue to support the Lua module, we have to start becoming
      OpenResty - users should just use OpenResty at this point for Lua.
      Changes made for this removal:
       + d/control:
         + Remove lua module from dependencies, and binary build item.
         + Add "Breaks" line for nginx-lua for older versions of NGINX.
           This is added to the nginx metapackage and nginx-extras.
       + d/rules: Remove Lua module from the build flags for -extras.
       + d/modules/{,patches/,watch/}nginx-lua: Remove Lua module, watch file,
         module patches.
       + d/modules/control: Remove Lua module from definitions
       + d/copyright: Remove lua module.
       + d/tests/{control,lua/}: Remove Lua test entirely, remove
         dependencies on any test which request
         libnginx-mod-http-lua as it's gone.
    - d/control: drop GeoIP from nginx-core due to demotion of libgeoip
      (LP #1861101, LP #1867150):
      + remove libnginx-mod-http-geoip from nginx-core dependency
      + have nginx-core depend on libnginx-mod-stream-geoip2
        instead of libnginx-mod-stream-geoip
      + adjust package descriptions accordingly
    - d/control: (GeoIP2 related changes)
      + Update dependencies for http-geoip2 package to include libmaxminddb0.
      + Update nginx-core to include http-geoip2 module due to approved bin-MIR
        (LP #1867198)
      + Move geoip2 module build flags to the common flags so all
        package flavors have it.
      + Update dependencies for nginx-light, etc. to include
        libnginx-mod-http-geoip2 as it's in the 'common build flags'
        for all flavors of the builds.
      + Update package description for nginx-core to indicate geoip2
        is included, and to list third party HTTP modules.  GeoIP2
        is not included for Stream by default, so we have to adjust
        this because the Stream part isn't MIR'd.
  * d/p/ubuntu-branding.patch: Refresh
  * Dropped:
    - DNS Resolver Off-by-One Heap Write
      + debian/patches/CVE-2021-23017.patch: fix logic in
        src/core/ngx_resolver.c.
      [Not needed: Replaced by upstream patches in separate commit]
    - DNS Resolver issues
      + debian/patches/CVE-2021-23017-1.patch: fixed off-by-one write in
        src/core/ngx_resolver.c.
      + debian/patches/CVE-2021-23017-2.patch: fixed off-by-one read in
        src/core/ngx_resolver.c.
      + debian/patches/CVE-2021-23017.patch: removed, replaced with upstream
        commits.
      [Included in upstream release 1.20.1]
    - ALPACA TLS issue
      + debian/patches/CVE-2021-3618.patch: specify the number of
        errors after which the connection is closed in
        src/mail/ngx_mail.h, src/mail/ngx_mail_core_module.c and
        src/mail/ngx_mail_handler.c.
      [Included in Debian release 1.20.2-2]

Date: Tue, 12 Jul 2022 10:23:53 -0700
Changed-By: Bryce Harrington <bryce at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/nginx/1.20.2-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 12 Jul 2022 10:23:53 -0700
Source: nginx
Built-For-Profiles: noudeb
Architecture: source
Version: 1.20.2-2ubuntu1
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Bryce Harrington <bryce at canonical.com>
Changes:
 nginx (1.20.2-2ubuntu1) kinetic; urgency=medium
 .
   * Merge with Debian unstable. Remaining changes:
     - d/p/ubuntu-branding.patch: add Ubuntu branding
     - d/apport/source_nginx.py: Add apport hooks for additional bug
       information gathering.
     - d/nginx-common.install: Add install rule for apport hooks.
     - d/p/nginx-fix-pidfile.patch: Fix NGINX PIDfile handling to avoid
       SystemD race condition - thanks to Tj for the patch.  (LP #1581864)
     - d/control: make nginx and nginx-full arch any, so that nginx-full
       is no longer pulled into main because of i386 (LP #1893267)
     - Remove the Lua modules from NGINX (Server Team Decision) - future support
       for Lua module now requires resty-core from OpenResty, meaning that if
       we want to continue to support the Lua module, we have to start becoming
       OpenResty - users should just use OpenResty at this point for Lua.
       Changes made for this removal:
        + d/control:
          + Remove lua module from dependencies, and binary build item.
          + Add "Breaks" line for nginx-lua for older versions of NGINX.
            This is added to the nginx metapackage and nginx-extras.
        + d/rules: Remove Lua module from the build flags for -extras.
        + d/modules/{,patches/,watch/}nginx-lua: Remove Lua module, watch file,
          module patches.
        + d/modules/control: Remove Lua module from definitions
        + d/copyright: Remove lua module.
        + d/tests/{control,lua/}: Remove Lua test entirely, remove
          dependencies on any test which request
          libnginx-mod-http-lua as it's gone.
     - d/control: drop GeoIP from nginx-core due to demotion of libgeoip
       (LP #1861101, LP #1867150):
       + remove libnginx-mod-http-geoip from nginx-core dependency
       + have nginx-core depend on libnginx-mod-stream-geoip2
         instead of libnginx-mod-stream-geoip
       + adjust package descriptions accordingly
     - d/control: (GeoIP2 related changes)
       + Update dependencies for http-geoip2 package to include libmaxminddb0.
       + Update nginx-core to include http-geoip2 module due to approved bin-MIR
         (LP #1867198)
       + Move geoip2 module build flags to the common flags so all
         package flavors have it.
       + Update dependencies for nginx-light, etc. to include
         libnginx-mod-http-geoip2 as it's in the 'common build flags'
         for all flavors of the builds.
       + Update package description for nginx-core to indicate geoip2
         is included, and to list third party HTTP modules.  GeoIP2
         is not included for Stream by default, so we have to adjust
         this because the Stream part isn't MIR'd.
   * d/p/ubuntu-branding.patch: Refresh
   * Dropped:
     - DNS Resolver Off-by-One Heap Write
       + debian/patches/CVE-2021-23017.patch: fix logic in
         src/core/ngx_resolver.c.
       [Not needed: Replaced by upstream patches in separate commit]
     - DNS Resolver issues
       + debian/patches/CVE-2021-23017-1.patch: fixed off-by-one write in
         src/core/ngx_resolver.c.
       + debian/patches/CVE-2021-23017-2.patch: fixed off-by-one read in
         src/core/ngx_resolver.c.
       + debian/patches/CVE-2021-23017.patch: removed, replaced with upstream
         commits.
       [Included in upstream release 1.20.1]
     - ALPACA TLS issue
       + debian/patches/CVE-2021-3618.patch: specify the number of
         errors after which the connection is closed in
         src/mail/ngx_mail.h, src/mail/ngx_mail_core_module.c and
         src/mail/ngx_mail_handler.c.
       [Included in Debian release 1.20.2-2]
Checksums-Sha1:
 18ceb44d145f799507d116e1fbe731b6512bd7ad 4425 nginx_1.20.2-2ubuntu1.dsc
 59888fdeb78eec4979a8df89a80b43ee84b73eb7 1062124 nginx_1.20.2.orig.tar.gz
 654dec12575ea1635da59d54603d52ac8c356ab5 720472 nginx_1.20.2-2ubuntu1.debian.tar.xz
 95e77902c1381bb9ea6198fc5dfc240119afc974 9122 nginx_1.20.2-2ubuntu1_source.buildinfo
Checksums-Sha256:
 48d35ca9a7041646330b932ed671b34eceedd35a77235341c42b3eade4deb704 4425 nginx_1.20.2-2ubuntu1.dsc
 958876757782190a1653e14dc26dfc7ba263de310e04c113e11e97d1bef45a42 1062124 nginx_1.20.2.orig.tar.gz
 d365355b21e5059785ac26e3487e0bd114425271a73c0ccdee5f5f0158726b9c 720472 nginx_1.20.2-2ubuntu1.debian.tar.xz
 9f6b483aeda8b3931c48a3b09e379cfc90080c376c3d0b391be69cec57f5160a 9122 nginx_1.20.2-2ubuntu1_source.buildinfo
Files:
 883d039492c4543a6e75e2d18c84ab3b 4425 httpd optional nginx_1.20.2-2ubuntu1.dsc
 3bcc5ccdc052c35d0d3c5557cf56c7d2 1062124 httpd optional nginx_1.20.2.orig.tar.gz
 e76fc8dcc5d4522826805ebbefbf717b 720472 httpd optional nginx_1.20.2-2ubuntu1.debian.tar.xz
 b7b4fd33f181f4825d4c4d058b1ac1da 9122 httpd optional nginx_1.20.2-2ubuntu1_source.buildinfo
Original-Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers at alioth-lists.debian.net>
Vcs-Git: https://git.launchpad.net/~bryce/ubuntu/+source/nginx
Vcs-Git-Commit: bd3d4f72d5343b66198e9a852d99771873366953
Vcs-Git-Ref: refs/heads/merge-v1.20.2-2-kinetic


More information about the kinetic-changes mailing list