Control: tags -1 confirmed moreinfo
Hi,
On Sun, Nov 30, 2014 at 01:17:07PM +0200, Christos Trochalakis wrote:
> I have prepared an upload for nginx that I'd like to upload to sid and
> get an exception for jessie.
>
> 1.6.2-5 (not yet uploaded) includes an important bug fix (disable sslv3
> by default) that is somewhat important to be included in jessie, since
> all other (web) servers have already disabled SSLv3.
>
> Apart from that, I have included some minor packaging and documentation
> fixes that are nice-to-have. I believe that they are safe enough to be
> included if that's ok with the release team.
>
> The relevant changelog entries:
>
> * debian/conf/nginx.conf:
> + Drop SSLv3 protocol (POODLE), and prefer server ciphers
> by default. (Closes: #767456)
> * debian/copyright:
> + Add copyright for ngx_http_substitutions_filter_module.
> * debian/nginx-common.{preinst,postinst,postrm}:
> + Remove /etc/nginx/naxsi-ui.conf conffile. (Closes: #768233)
> * debian/README.Debian:
> + Add a list of important changes since wheezy.
>
> I am also attaching a debdiff from testing. The changes are also pushed to
> the for_jessie branch in our collab-maint repo:
>
> http://anonscm.debian.org/cgit/collab-maint/nginx.git/log/?h=for_jessie
>
> Please inform me if those changes are approved by the release team or if I
> have to drop some of the fixes.
Please go ahead and remove the moreinfo tag from this bug once the upload to
unstable is done.
Cheers,
Ivo
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
