Muehlenhoff has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/364664 )
Change subject: CVE-2017-7529 ...................................................................... CVE-2017-7529 Change-Id: I71e7268bd5e69ddf2a5ba4e43f63dbf02a423f78 --- M debian/changelog A debian/patches/0670_CVE-2017-7529.patch M debian/patches/series 3 files changed, 21 insertions(+), 0 deletions(-) Approvals: Muehlenhoff: Looks good to me, approved jenkins-bot: Verified diff --git a/debian/changelog b/debian/changelog index d31235b..97a67f9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +nginx (1.11.10-1+wmf3) jessie-wikimedia; urgency=medium + + * CVE-2017-7529 + + -- Moritz Muehlenhoff <[email protected]> Wed, 12 Jul 2017 09:33:21 +0200 + nginx (1.11.10-1+wmf2) jessie-wikimedia; urgency=medium * Build-Depend on libssl11-dev | libssl-dev for jessie and stretch compat diff --git a/debian/patches/0670_CVE-2017-7529.patch b/debian/patches/0670_CVE-2017-7529.patch new file mode 100644 index 0000000..7da7601 --- /dev/null +++ b/debian/patches/0670_CVE-2017-7529.patch @@ -0,0 +1,14 @@ +diff a/src/http/modules/ngx_http_range_filter_module.c b/src/http/modules/ngx_http_range_filter_module.c +--- a/src/http/modules/ngx_http_range_filter_module.c ++++ b/src/http/modules/ngx_http_range_filter_module.c +@@ -377,6 +377,10 @@ ngx_http_range_parse(ngx_http_request_t + range->start = start; + range->end = end; + ++ if (size > NGX_MAX_OFF_T_VALUE - (end - start)) { ++ return NGX_HTTP_RANGE_NOT_SATISFIABLE; ++ } ++ + size += end - start; + + if (ranges-- == 0) { diff --git a/debian/patches/series b/debian/patches/series index 985913f..5ccb5a6 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -5,3 +5,4 @@ 0500-ssl-curve.patch 0600-stapling-multi-file.patch 0660-version-too-low.patch +0670_CVE-2017-7529.patch -- To view, visit https://gerrit.wikimedia.org/r/364664 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: I71e7268bd5e69ddf2a5ba4e43f63dbf02a423f78 Gerrit-PatchSet: 1 Gerrit-Project: operations/software/nginx Gerrit-Branch: master Gerrit-Owner: Muehlenhoff <[email protected]> Gerrit-Reviewer: Muehlenhoff <[email protected]> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
