[Pkg-nginx-maintainers] nginx 1.22.1-1

Jan Mojzis jan.mojzis at gmail.com
Thu Nov 10 07:21:13 GMT 2022


Hello,
everything looks fine in the experimental,
I would upload nginx/ libnginx-mod-http-lua to unstable tonight (10.11. GMT 18:00)

Jan

> On 26. 10. 2022, at 19:05, Jan Mojzis <jan.mojzis at gmail.com> wrote:
> 
> Hello,
> 19.10. has been released new nginx 1.22.1 with a fix for the memory corruption and memory
> disclosure vulnerabilities in the ngx_http_mp4_module (CVE-2022-41741, CVE-2022-41742).
> 
> I am preparing to upload the debian version 1.22.1-1.
> Upload is a bit more complicated than before after separating libnginx-mod-http-lua
> because the packages (nginx and libnginx-mod-http-lua) depend on each other.
> 
> First I will upload both packages to the experimental (tomorrow 27.10. GM 18:00)
> 
> And if everything is ok, then I will upload both packages to unstable (I assume 1.11. at the earliest).
> 
> 
> 
> Comments are welcome.
> 
> Jan
> 
> 
> 
> 




More information about the Pkg-nginx-maintainers mailing list