I'm attaching the patch which was generated by svn diff for r3528. This patch is what I used to build the debdiff. The patch applied cleanly except for the hunk in src/http/modules/perl/ngx_http_perl_module.c: there's an extra line of code in the patch (r->main->count++;) that isn't present in the Ubuntu code.
** Patch added: "SVN Patch for r3528" https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/783508/+attachment/2173693/+files/nginx.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/783508 Title: nginx package in Lucid Lynx allows null byte vulnerability in certain configurations To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/783508/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs