Version exists in Quantal / Precise that already has this.  Set as "Fix
Released" in Quantal.

I should probably elaborate on my discussion with mdeslaur.

The version you are using does not have IPv6 support in that *module*
that you are using.  To quote you:

"That 'deny all' doesn't work with ipv6 according to
http://wiki.nginx.org/HttpAccessModule (ipv6 support appeared at version
0.8.22)."

The version in Lucid of nginx (and therefore that module) is
0.7.65-1ubuntu2.2, which does not include IPv6 support for the module.

I will not mark the Lucid version as "Won't Fix", or "Invalid".
However, if you can attach a patch or a debdiff or both that includes
the changes required to make it work, I will include the patch in my
release of debdiffs (and fixes) for Bug #956150, which addresses current
public vulnerabilities in nginx.  However, after I release those
debdiffs, I will not file SRUs to include this functionality unless
others can agree with you that it is a security vulnerability and has
the requirement of absolute need (and/or a public CVE is filed to the
effect that this is a security issue).

In the mean time, I believe that the NGINX team's PPAs (which are
maintained by Michael Lustfield and myself) have 1.2.0 (stable)
available for Lucid.  If you would like to include the fixes for the
other bug I referenced here (which addresses two CVEs), this should also
include the IPv6 support unless you can confirm that this problem occurs
in 1.2.0, which is in Quantal right now.

** Changed in: nginx (Ubuntu)
       Status: Invalid => Fix Released

** Changed in: nginx (Ubuntu Lucid)
     Assignee: (unassigned) => Thomas Ward (trekcaptainusa-tw)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/929334

Title:
  nginx deny all doesn't support ipv6

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/929334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to