atom7

but "In general, you should deploy the NGINX mainline branch at all times." @ http://nginx.com/blog/nginx-1-6-1-7-released/

It hasn't. "This PPA is maintained by volunteers and is not distributed by nginx.org."

".. stealing private keys on most NGINX servers is at least extremely hard and, likely, impossible .."

Nice!

It's a common practice to use two pointers when parsing some stream data buffer. If you will use a pointer to the start of the buffer and the size of an available data to parse, then you would need to change two variables instead of one on every parsing stage. So you have more opportunity to make a mistake.

btw, I use packages from nginx.org, they're updated in time with every release: http://nginx.org/en/linux_packages.html

It's not affected on Debian/Ubuntu, check --with-debug flag.

I assume the reason was to keep diff as minimal as possible. Note that it should apply to all mentioned versions without problems.