Public bug reported: Debian Unstable has nginx 1.6.2-5, which differs from the version in Vivid currently, but only a little. All of the changes are done in the debian/ folder. The full list is included below in the attached changelog revision for 1.6.2-5 in Debian, minus the added changelog entry for the merge (which is present in the debdiff).
The key changes made here are that the SSLv3 protocol is dropped in `nginx.conf` (which is higher up in the configuraiton inheritance structure than the default config) and that server-defined ciphers are preferred by default now (in `nginx.conf). As well, the nginx-common preinst, postinst, and postrm scripts now remove the /etc/nginx/naxsi- ui.conf conf files (which are now obsolete as the Naxsi variant was removed). To be attached (shortly after this bug is asigned a bug number) is a debdiff for this merge. (I created it using the UDD method of merging, built the package, and ran a debdiff command to generate the diff.) ** Affects: nginx (Ubuntu) Importance: Wishlist Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to nginx in Ubuntu. https://bugs.launchpad.net/bugs/1399967 Title: Please merge nginx 1.6.2-5 (main) from Debian Unstable (main) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1399967/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs