From 8d412ee081528b6466005466c5ae393305af47e9 Mon Sep 17 00:00:00 2001 From: orleika Date: Wed, 12 Jul 2017 23:37:00 +0900 Subject: [PATCH 1/6] Update nginx to version 1.13.3 Security: a specially crafted request might result in an integer verflow and incorrect processing of ranges in the range filter, potentially resulting in sensitive information leak (CVE-2017-7529). --- Dockerfile | 2 +- README.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index a836a19..21da218 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,7 +2,7 @@ FROM alpine:latest MAINTAINER orleika -ARG NGINX_VERSION=1.13.1 +ARG NGINX_VERSION=1.13.3 ARG LIBRESSL_VERSION=2.5.4 ARG GPG_LIBRESSL="A1EB 079B 8D3E B92B 4EBD 3139 663A F51B D5E4 D8D5" ARG GPG_NGINX="B0F4 2533 73F8 F6F5 10D4 2178 520A 9993 A1C0 52F8" diff --git a/README.md b/README.md index e6457e9..792ad06 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # Docker Nginx Image _(docker-nginx)_ [![Build Status](https://img.shields.io/travis/orleika/docker-nginx/master.svg?style=flat-square)](https://travis-ci.org/orleika/docker-nginx) -[![nginx](http://img.shields.io/badge/nginx-v1.13.1-blue.svg?style=flat-square)](https://nginx.org/en/download.html) +[![nginx](http://img.shields.io/badge/nginx-v1.13.3-blue.svg?style=flat-square)](https://nginx.org/en/download.html) [![LibreSSL](http://img.shields.io/badge/LibreSSL-v2.5.4-blue.svg?style=flat-square)](https://www.libressl.org/) [![MIT License](http://img.shields.io/badge/license-MIT-blue.svg?style=flat-square)](https://orleika.github.io/mit-license) From 778391cf2b54fac06baae1d7e4c10e7d4502d41d Mon Sep 17 00:00:00 2001 From: orleika Date: Wed, 12 Jul 2017 23:38:07 +0900 Subject: [PATCH 2/6] Fix dead link --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 792ad06..bd307f2 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ [![Build Status](https://img.shields.io/travis/orleika/docker-nginx/master.svg?style=flat-square)](https://travis-ci.org/orleika/docker-nginx) [![nginx](http://img.shields.io/badge/nginx-v1.13.3-blue.svg?style=flat-square)](https://nginx.org/en/download.html) [![LibreSSL](http://img.shields.io/badge/LibreSSL-v2.5.4-blue.svg?style=flat-square)](https://www.libressl.org/) -[![MIT License](http://img.shields.io/badge/license-MIT-blue.svg?style=flat-square)](https://orleika.github.io/mit-license) +[![MIT License](http://img.shields.io/badge/license-MIT-blue.svg?style=flat-square)](https://github.com/orleika/docker-nginx/blob/master/LICENSE) > docker nginx image From 90ffc44f184a00b2d1c9de98b7b70d5b956b60bb Mon Sep 17 00:00:00 2001 From: orleika Date: Wed, 30 Aug 2017 12:08:13 +0900 Subject: [PATCH 3/6] Change nginx to v1.13.4 and libressl to v2.5.5 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 21da218..ca6b5b4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,8 +2,8 @@ FROM alpine:latest MAINTAINER orleika -ARG NGINX_VERSION=1.13.3 -ARG LIBRESSL_VERSION=2.5.4 +ARG NGINX_VERSION=1.13.4 +ARG LIBRESSL_VERSION=2.5.5 ARG GPG_LIBRESSL="A1EB 079B 8D3E B92B 4EBD 3139 663A F51B D5E4 D8D5" ARG GPG_NGINX="B0F4 2533 73F8 F6F5 10D4 2178 520A 9993 A1C0 52F8" From 08eec56ca74418b03ddedfc8d4feae55f1624e7f Mon Sep 17 00:00:00 2001 From: orleika Date: Wed, 20 Sep 2017 09:59:06 +0900 Subject: [PATCH 4/6] Change nginx to v1.13.5 and libressl to v2.5.5 --- Dockerfile | 2 +- README.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index ca6b5b4..ec92da5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,7 +2,7 @@ FROM alpine:latest MAINTAINER orleika -ARG NGINX_VERSION=1.13.4 +ARG NGINX_VERSION=1.13.5 ARG LIBRESSL_VERSION=2.5.5 ARG GPG_LIBRESSL="A1EB 079B 8D3E B92B 4EBD 3139 663A F51B D5E4 D8D5" ARG GPG_NGINX="B0F4 2533 73F8 F6F5 10D4 2178 520A 9993 A1C0 52F8" diff --git a/README.md b/README.md index bd307f2..9804ceb 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@ # Docker Nginx Image _(docker-nginx)_ [![Build Status](https://img.shields.io/travis/orleika/docker-nginx/master.svg?style=flat-square)](https://travis-ci.org/orleika/docker-nginx) -[![nginx](http://img.shields.io/badge/nginx-v1.13.3-blue.svg?style=flat-square)](https://nginx.org/en/download.html) -[![LibreSSL](http://img.shields.io/badge/LibreSSL-v2.5.4-blue.svg?style=flat-square)](https://www.libressl.org/) +[![nginx](http://img.shields.io/badge/nginx-v1.13.5-blue.svg?style=flat-square)](https://nginx.org/en/download.html) +[![LibreSSL](http://img.shields.io/badge/LibreSSL-v2.5.5-blue.svg?style=flat-square)](https://www.libressl.org/) [![MIT License](http://img.shields.io/badge/license-MIT-blue.svg?style=flat-square)](https://github.com/orleika/docker-nginx/blob/master/LICENSE) > docker nginx image From 8f90b9ce0e34128a339ea9455995119cf2973e0b Mon Sep 17 00:00:00 2001 From: orleika Date: Wed, 20 Sep 2017 10:08:11 +0900 Subject: [PATCH 5/6] Fix docs --- README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/README.md b/README.md index 9804ceb..88565af 100644 --- a/README.md +++ b/README.md @@ -8,8 +8,7 @@ > docker nginx image Small-Secure-Fast docker nginx image. -Base image is alpine, which is a security-oriented, lightweight Linux distribution. Most response headers are concealed, and DDoS mitigation is equipped. You should use secure headers included in `conf.d` for further safety considerations. Additionally, nginx caching parameters are optimized. -This image is automatically released by Docker Cloud. +Base image is alpine, which is a security-oriented, lightweight Linux distribution. Most response headers are concealed, and DDoS mitigation is equipped. You should use secure headers included in `conf.d` for further safety considerations. Additionally, nginx caching parameters are optimized. This image is automatically [released](https://hub.docker.com/r/orleika/nginx/) by Docker Cloud. ## Install From 95418dc1ea745bda265bc25ccf4e96744632c1ec Mon Sep 17 00:00:00 2001 From: orleika Date: Wed, 20 Sep 2017 10:09:14 +0900 Subject: [PATCH 6/6] Fix CI target branch --- .travis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.travis.yml b/.travis.yml index 8b64aae..2efb27f 100644 --- a/.travis.yml +++ b/.travis.yml @@ -4,7 +4,7 @@ sudo: required branches: only: - - devel + - develop services: - docker