www-servers/nginx: rev bump to fix CVE-2016-1247 (bug #605008)
authorThomas Deutschmann <whissi@gentoo.org>
Sat, 7 Jan 2017 23:29:14 +0000 (00:29 +0100)
committerThomas Deutschmann <whissi@gentoo.org>
Sat, 7 Jan 2017 23:30:45 +0000 (00:30 +0100)
commit7e9a4ebc9ca7bb35814cacf85c9a28cdab6fdf9f
tree687b76b9adf13c4cba39b8adf899249a68ec1e67
parent3ca742c039ce369375e30d1d01b0104495a7f999
www-servers/nginx: rev bump to fix CVE-2016-1247 (bug #605008)

Ebuild changes:
===============
 - Rewritten pkg_postinst for a better user experience

  - Package tries to show warnings/notices only when really needed

  - Permission checks should now be more reliable, i.e. working when
    switching between stable (:0) and mainline (:mainline) slot.

  - An additional sanity check will make sure that at least permissions on
    "/var/log/nginx" will prevent a known root privilege escalation

 - Permissions on "/var/log/nginx" changed to 0710 and owner changed to
   0:nginx to fix CVE-2016-1247 (bug #tba)

 - Runscript: Bashisms removed

 - User is now able to control most runscript options like used nginx'
   config file, pidfile, user/group, start-stop-daemon arguments ... through
   "/etc/conf.d/nginx"

Package-Manager: Portage-2.3.3, Repoman-2.3.1
www-servers/nginx/files/nginx.confd [new file with mode: 0644]
www-servers/nginx/files/nginx.initd-r4 [new file with mode: 0644]
www-servers/nginx/nginx-1.10.2-r3.ebuild [new file with mode: 0644]
www-servers/nginx/nginx-1.11.6-r1.ebuild [new file with mode: 0644]