diff options
author | Peter Korsgaard <peter@korsgaard.com> | 2018-11-09 11:08:19 +0100 |
---|---|---|
committer | Peter Korsgaard <peter@korsgaard.com> | 2018-11-09 14:05:48 +0100 |
commit | c2f5b3a3a866859528747edc191fb9c241343e88 (patch) | |
tree | 5a9a60411934ca631af7e0615c279eb83cd3cd12 /package/nginx/nginx.hash | |
parent | 3a4c111b1f359e2ba50e31ef1246e48456a391de (diff) | |
download | buildroot-c2f5b3a3a866859528747edc191fb9c241343e88.tar.gz buildroot-c2f5b3a3a866859528747edc191fb9c241343e88.zip |
nginx: security bump to 1.15.6
Fixes the following security issues:
CVE-2018-16843: Excessive memory usage in HTTP/2
CVE-2018-16844: Excessive CPU usage in HTTP/2
CVE-2018-16845: Memory disclosure in the ngx_http_mp4_module
Refreshed patch 0004 + 0007 as they no longer applied cleanly.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/nginx/nginx.hash')
-rw-r--r-- | package/nginx/nginx.hash | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/nginx/nginx.hash b/package/nginx/nginx.hash index 51284aefbe..c3e6b6a720 100644 --- a/package/nginx/nginx.hash +++ b/package/nginx/nginx.hash @@ -1,4 +1,4 @@ # Locally calculated after checking pgp signature -sha256 b0b58c9a3fd73aa8b89edf5cfadc6641a352e0e6d3071db1eb3215d72b7fb516 nginx-1.15.0.tar.gz +sha256 a3d8c67c2035808c7c0d475fffe263db8c353b11521aa7ade468b780ed826cc6 nginx-1.15.6.tar.gz # License files, locally calculated sha256 e18f05bcaad47528f8b21861d4a0fb9815ca1bbb4be946c51a51d36623758bcc LICENSE |