[ubuntu/lucid-security] nginx 0.7.65-1ubuntu2.3 (Accepted)

[Thomas Ward]

nginx (0.7.65-1ubuntu2.3) lucid-security; urgency=low

  * Security update (closes LP: #956150):
     * Patch to fix 'Use-after-free vulnerability' (CVE-2012-1180).
     * Patch to fix 'Heap-based buffer overflow in compression-pointer
       processing in core/ngx_resolver.c' (CVE-2011-4315).

Date: Tue, 12 Jun 2012 12:37:49 -0400
Changed-By: Thomas Ward <trekcaptainusa-tw at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/nginx/0.7.65-1ubuntu2.3
-------------- next part --------------
Format: 1.8
Date: Tue, 12 Jun 2012 12:37:49 -0400
Source: nginx
Binary: nginx nginx-dbg
Architecture: source
Version: 0.7.65-1ubuntu2.3
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Thomas Ward <trekcaptainusa-tw at ubuntu.com>
Description: 
 nginx      - small, but very powerful and efficient web server and mail proxy
 nginx-dbg  - Debugging symbols for nginx
Launchpad-Bugs-Fixed: 956150
Changes: 
 nginx (0.7.65-1ubuntu2.3) lucid-security; urgency=low
 .
   * Security update (closes LP: #956150):
      * Patch to fix 'Use-after-free vulnerability' (CVE-2012-1180).
      * Patch to fix 'Heap-based buffer overflow in compression-pointer
        processing in core/ngx_resolver.c' (CVE-2011-4315).
Checksums-Sha1: 
 adeeaa5315cdfba615d068247f842672ad6af0b6 2038 nginx_0.7.65-1ubuntu2.3.dsc
 04403a1e88e15f98b406e22d4aa15fe2f65fa8c8 28107 nginx_0.7.65-1ubuntu2.3.debian.tar.gz
Checksums-Sha256: 
 af275dab74f53614256b04be91121dc7cd2afeaff3cb9cd097f05e05524dbdd6 2038 nginx_0.7.65-1ubuntu2.3.dsc
 6f3d5d98e3641a16962504d80adaa6f057b2bcfd85c5937be5cd556739968eed 28107 nginx_0.7.65-1ubuntu2.3.debian.tar.gz
Files: 
 687f5b0f27d427ff59fae127da011838 2038 httpd optional nginx_0.7.65-1ubuntu2.3.dsc
 93382beea49b322e2989623c612dae30 28107 httpd optional nginx_0.7.65-1ubuntu2.3.debian.tar.gz
Original-Maintainer: Jose Parrella <bureado at debian.org>