4 ms·

Arch Linux already has the 1.0.14 release available in the community repo[1]. There are still no new patch level version of 0.7.67 available for Debian Squeeze

by uggedal 15y ago

Arch Linux already has the 1.0.14 release available in the community repo[1]. There are still no new patch level version of 0.7.67 available for Debian Squeeze[2] or Ubutu 10.4 LTS' 0.7.65 version[3]. EPEL for RHEL and derivatives also lack a new upstream version[4]. [1]: http://projects.archlinux.org/svntogit/community.git/commit/trunk?h=packages/nginx&id=9fa938f3189c65b4d4e30d6f82868f59b8dce503 http://projects.archlinux.org/svntogit/community.git/commit/... [2]: http://packages.debian.org/changelogs/pool/main/n/nginx/?C=M;O=D http://packages.debian.org/changelogs/pool/main/n/nginx/?C=M... [3]: http://changelogs.ubuntu.com/changelogs/pool/universe/n/nginx/?C=M;O=D http://changelogs.ubuntu.com/changelogs/pool/universe/n/ngin... [4]: http://dl.fedoraproject.org/pub/epel/6/x86_64/repoview/nginx.html http://dl.fedoraproject.org/pub/epel/6/x86_64/repoview/nginx...

IgorPartola 15y ago
Re [Debian/Ubuntu], wait, they incorporated the fix on 17 June 2011, but the patch is being exposed now on the nginx mailing list? Edit: changed [2] to [Debian/Ubuntu]
- deleted 15y ago
  [deleted]
- uggedal 15y ago
  The vulnerability from last year sounded similar and I therefore initialy mixed them. Updated my comment.
Wilya 15y ago
1.0.14[0] and 1.1.17[1] have been pushed to the FreeBSD ports tree too. [0] http://www.freebsd.org/cgi/getmsg.cgi?fetch=753841+0+current/cvs-ports http://www.freebsd.org/cgi/getmsg.cgi?fetch=753841+0+current... [1] http://www.freebsd.org/cgi/getmsg.cgi?fetch=756257+0+current/cvs-ports http://www.freebsd.org/cgi/getmsg.cgi?fetch=756257+0+current...
wkral 15y ago
1.0.14 has also been released in the Ubuntu PPA for those who use Ubuntu: https://launchpad.net/~nginx/+archive/stable https://launchpad.net/~nginx/+archive/stable 1.1.17 is also there in the development channel: https://launchpad.net/~nginx/+archive/development https://launchpad.net/~nginx/+archive/development
spindritf 15y ago
> here are still no new patch level version of 0.7.67 available for Debian Squeeze[2] or Ubutu 10.4 LTS' 0.7.65 version[3]. As a side note, there's an official Debian/Ubuntu repository maintained by nginx.org http://wiki.nginx.org/Install#Official_Debian.2FUbuntu_packages http://wiki.nginx.org/Install#Official_Debian.2FUbuntu_packa...

by uggedal 15y ago

IgorPartola 15y ago

Re [Debian/Ubuntu], wait, they incorporated the fix on 17 June 2011, but the patch is being exposed now on the nginx mailing list? Edit: changed [2] to [Debian/Ubuntu]

deleted 15y ago
[deleted]
uggedal 15y ago
The vulnerability from last year sounded similar and I therefore initialy mixed them. Updated my comment.

Wilya 15y ago

1.0.14[0] and 1.1.17[1] have been pushed to the FreeBSD ports tree too. [0] http://www.freebsd.org/cgi/getmsg.cgi?fetch=753841+0+current/cvs-ports http://www.freebsd.org/cgi/getmsg.cgi?fetch=753841+0+current... [1] http://www.freebsd.org/cgi/getmsg.cgi?fetch=756257+0+current/cvs-ports http://www.freebsd.org/cgi/getmsg.cgi?fetch=756257+0+current...

wkral 15y ago

1.0.14 has also been released in the Ubuntu PPA for those who use Ubuntu: https://launchpad.net/~nginx/+archive/stable https://launchpad.net/~nginx/+archive/stable 1.1.17 is also there in the development channel: https://launchpad.net/~nginx/+archive/development https://launchpad.net/~nginx/+archive/development

spindritf 15y ago

> here are still no new patch level version of 0.7.67 available for Debian Squeeze[2] or Ubutu 10.4 LTS' 0.7.65 version[3]. As a side note, there's an official Debian/Ubuntu repository maintained by nginx.org http://wiki.nginx.org/Install#Official_Debian.2FUbuntu_packages http://wiki.nginx.org/Install#Official_Debian.2FUbuntu_packa...