buildroot/package/nginx, branch 2016.02

nginx: security bump to version 1.8.1

2016-01-27T20:37:11+00:00

Fixes: CVE-2016-0742 - invalid pointer dereference might occur during DNS server response processing if the "resolver" directive was used, allowing anattacker who is able to forge UDP packets from the DNS server to cause segmentation fault in a worker process. CVE-2016-0746 - use-after-free condition might occur during CNAME response processing if the "resolver" directive was used, allowing an attacker who is able to trigger name resolution to cause segmentation fault in a worker process, or might have potential other impact. CVE-2016-0747 - CNAME resolution was insufficiently limited if the "resolver" directive was used, allowing an attacker who is able to trigger arbitrary name resolution to cause excessive resource consumption in worker processes. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/nginx: fix a typo

2015-11-04T20:48:36+00:00

Signed-off-by: Noé Rubinstein Signed-off-by: Thomas Petazzoni

package: Replace 'echo -n' by 'printf'

2015-10-03T22:56:41+00:00

'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Peter Korsgaard

nginx: activate the systemd service

2015-07-13T20:28:09+00:00

Signed-off-by: Aurélien Chabot Signed-off-by: Thomas Petazzoni

nginx: bump to 1.8.0 (latest stable version)

2015-06-28T21:02:21+00:00

Patches refreshed to apply with no shift or fuzz. Signed-off-by: Danomi Manchego Signed-off-by: Thomas Petazzoni

nginx: fix nginx.old clean-up

2015-06-28T21:00:57+00:00

The bin path for nginx is configured for /usr/sbin, so deleting the nginx.old back-up from /usr/bin never works. Fix path, and also use "$(RM)" instead of "-$(RM)", as "rm -f" never fails. Signed-off-by: Danomi Manchego Acked-by: Samuel Martin Tested-by: Samuel Martin Signed-off-by: Thomas Petazzoni

package: kill pointless text justification

2015-04-23T07:47:08+00:00

Signed-off-by: Gustavo Zacarias Acked-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

packages: remove non-IPv6 dependencies and tweaks

2015-04-22T21:06:35+00:00

Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

nginx: bump to version 1.6.3

2015-04-07T20:22:25+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

packages: remove (non-)lfs dependencies and tweaks

2015-04-01T20:47:22+00:00

Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni