[Bug 1177919] Re: Merge nginx 1.4.1-1 (universe) from Debian unstable (main)

[Launchpad Bug Tracker]

** Branch linked: lp:ubuntu/saucy-proposed/nginx

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1177919

Title:
  Merge nginx 1.4.1-1 (universe) from Debian unstable (main)

Status in “nginx” package in Ubuntu:
  Confirmed

Bug description:
  Please sync nginx 1.4.1-1 (universe) from Debian unstable (main)

  Explanation of the Ubuntu delta and why it can be dropped:
    * debian/patches/ubuntu-branding.patch: Add ubuntu branding
      to server_tokens.
    * debian/patches/ubuntu-branding.patch: Add ubuntu branding
      to server_tokens.
    * debian/conf/sites-available/default:
      * Modify default site configuration file to correct a typo
        that prevented out-of-the-box usability (LP: #1162177)
    * debian/conf/sites-available/default:
      * Modify default site default configuration file to bind to IPv6
        only for IPv6 default listen statement (LP: #1132678)

  The ubuntu delta is for 1.2.6-1.  This is being replaced by 1.4.1-1 from Unstable
  which is a newer release and addresses a lot of bugs, and a few CVEs.

  
  Changelog entries since current saucy version 1.2.6-1ubuntu3:

  nginx (1.4.1-1) unstable; urgency=low

    * New upstream release:
      + Fixes arbitrary code execution (CVE-2013-2028).
    * Uploaded to unstable.
    * debian/control:
      + Updated Standards-Version to 3.9.4

   -- Kartik Mistry <kartik at debian.org>  Tue, 07 May 2013 19:53:46 +0530

  nginx (1.4.0-2) experimental; urgency=low

    [ Ondřej Surý ]
    * debian/modules/:
      + Updated nginx-echo, nginx-cache-purge and naxsi modules.
      + Removed useless .gitignore, .gitmodules files.

    [ Kartik Mistry ]
    * debian/modules/nginx-upload:
      + This module no longer works with 1.3.x and above. Removed as of now.
    * debian/modules/ngx-fancyindex:
      + Added Fancy Indexes module (Closes: #704210)
    * debian/copyright:
      + Fixed path for modules in Files: field.
      + Updated copyright for debian/*
    * debian/rules:
      + Enabled spdy module (Closes: #706195).
    * debian/control:
      + Suggests: fcgiwrap (Closes: #701508).

    [ Cyril Lavier ]
    * debian/conf/naxsi-ui.conf:
      + Added configuration file for nginx-naxsi-ui using SQLite
        (Closes: #699678).
    * debian/nginx-naxsi-ui.config, debian/nginx-naxsi-ui.postinst,
      debian/nginx-naxsi-ui.postrm, debian/nginx-naxsi-ui.prerm,
      debian/nginx-naxsi-ui.templates:
      + Removed these files as they are not necessary anymore with the
        database engine switching from MySQL to SQLite.
    * debian/control:
      + Removed dependencies against MySQL.
    * debian/rules, debian/modules/ngx_http_substitutions_filter_module,
      debian/README.Modules-versions:
      + Added http_substitutions_filter module. (Closes: #706456)

   -- Kartik Mistry <kartik at debian.org>  Wed, 01 May 2013 10:48:43 +0530

  nginx (1.4.0-1) experimental; urgency=low

    [ Kartik Mistry ]
    * New upstream release (Closes: #706127).
    * debian/rules, debian/modules/:
      + Removed chunkin-nginx-module as it no longer supported for nginx 1.3.9+
      + Updated nginx-lua module to 0.8.0
      + Patched nginx-upload module as described in modules/README file.
    * Refreshed debian/patches/perl-use-dpkg-buildflags.patch
    * debian/logrotate:
      + Set default log to keep for 52 weeks instead of 52 days. Thanks to
        RjY <rjy at users.sourceforge.net> for patch (Closes: #696440)
    * debian/rules:
      + Added cache purge module to nginx-extras.
    * debian/control:
      + Suggests: nginx-docs. Thanks to colliar <colliar4ever at aol.com> for
        reporting bug (Closes: #702923)
    * debian/copyright:
      + Updated copyright year.
      + Fixed broken license text.

    [ Michael Lustfield ]
    * debian/conf/sites-available/default:
      + Added ipv6_only=on to default server block. (Closes: #700857)
      + Added default_server to ipv4 default server block. Now matches ipv6.
    * debian/rules:
      + Removed obsolete --with-md5 and --with-sha1

   -- Kartik Mistry <kartik at debian.org>  Thu, 25 Apr 2013 12:51:45 +0530

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1177919/+subscriptions