Accepting request 647696 from server:http

OBS-URL: https://build.opensuse.org/request/show/647696
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=31

nginx-1.15.5.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1a3a889a8f14998286de3b14cc1dd5b2747178e012d6d480a18aa413985dae6f
-size 1024791

nginx-1.15.5.tar.gz.asc

@@ -1,10 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEcBAABAgAGBQJbs4wOAAoJEFIKmZOhwFL4Q9cH/iv1heCFj6k1/T12/NCNBwQB
-5mDpjdJHe0LZL5H1u8vTLYKCP9d/t8n9cYsZyeVPnDw+CA4rkuuRLpNIzNa4rS1J
-3uPolkhsiHKyrOSDaRIWouMfCWlcfoAxln/u58LGlOyJakAuAhPh9NM3sNPMjQCf
-n8Qi5eN/+HkitzHPc3qa55dJl97B+eLLLn5/G4j4V2fFfmrhLzlSAf+wy/5idgN/
-H0gtN/J8YRApX5U1+cy26496T5SIc9cM6JASd1BRDZ/rJlvgUAl+Re9uROMjtvgc
-PV/KR1wPwTANGhnaEfFRpU/HtBJ7lW6TF3lT/vbZgnycymfwhrIos9sg59lp/RQ=
-=8tSf
------END PGP SIGNATURE-----

nginx-1.15.6.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a3d8c67c2035808c7c0d475fffe263db8c353b11521aa7ade468b780ed826cc6
+size 1025761

nginx-1.15.6.tar.gz.asc

@@ -0,0 +1,10 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEcBAABAgAGBQJb4Zn2AAoJEFIKmZOhwFL42TAIAIBcmKIiAnoHDMETWP3zm0Yh
+aGNrWQptJrugerO9+bRnHUOo42LkHe+NC5/eMpIsuVH27HsSNx6UWqpEI5ou5tl3
+NthbV5fpZIhxl9FkGMlDyQyYQEouqyJpcLsZ6qK8B/yVhb6NxVZX/B/EtHOdJ32i
+woXtb1hd8N2h9l11n54NMJArgLEpOf9NGDVCRYTKD1ZCDhOK+xQeH0Tt4hOik3oz
+vWWVHNIBhzosHi7uI1f2q+DnPZ00kGmXWi8ci3GZVVXoW90HXz5L/SuY3CAeAXpa
+3fdQ41Oj+HInfwb6QXRyNc9h/SOSUdGK4IU6PZXBnjvV9plEQmprZgBBAAAy+/o=
+=D9zf
+-----END PGP SIGNATURE-----

nginx.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Thu Nov  8 11:53:50 UTC 2018 - alarrosa@suse.com
+
+- update to 1.15.6
+  - Security: when using HTTP/2 a client might cause excessive memory
+    consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).
+  - Security: processing of a specially crafted mp4 file with the
+    ngx_http_mp4_module might result in worker process memory disclosure
+    (CVE-2018-16845).
+  - Feature: the "proxy_socket_keepalive", "fastcgi_socket_keepalive",
+    "grpc_socket_keepalive", "memcached_socket_keepalive",
+    "scgi_socket_keepalive", and "uwsgi_socket_keepalive" directives.
+  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL
+    1.1.1, the TLS 1.3 protocol was always enabled.
+  - Bugfix: working with gRPC backends might result in excessive memory
+    consumption.
+- Fix vim-plugin-nginx rpm group.
+
 -------------------------------------------------------------------
 Sat Nov 03 15:29:50 UTC 2018 - sean@suspend.net
 
@@ -5,6 +23,25 @@ Sat Nov 03 15:29:50 UTC 2018 - sean@suspend.net
   - Bugfix: a segmentation fault might occur in a worker process when using OpenSSL 1.1.0h or lower
   - Bugfix: minor potential bugs
 
+- update to 1.15.4
+  - Feature: now the "ssl_early_data" directive can be used with OpenSSL.
+  - Bugfix: in the ngx_http_uwsgi_module.
+  - Bugfix: connections with some gRPC backends might not be cached when
+    using the "keepalive" directive.
+  - Bugfix: a socket leak might occur when using the "error_page"
+    directive to redirect early request processing errors, notably errors
+    with code 400.
+  - Bugfix: the "return" directive did not change the response code when
+    returning errors if the request was redirected by the "error_page"
+    directive.
+  - Bugfix: standard error pages and responses of the
+    ngx_http_autoindex_module module used the "bgcolor" attribute, and
+    might be displayed incorrectly when using custom color settings in
+    browsers.
+  - Change: the logging level of the "no suitable key share" and "no
+    suitable signature algorithm" SSL errors has been lowered from "crit"
+    to "info".
+
 -------------------------------------------------------------------
 Thu Sep  6 12:36:21 UTC 2018 - Marcus Rueckert <mrueckert@suse.de>
 

nginx.spec

@@ -70,7 +70,7 @@
 %define ngx_doc_dir    %{_datadir}/doc/packages/%{name}
 #
 Name:           nginx
-Version:        1.15.5
+Version:        1.15.6
 Release:        0
 %define ngx_fancyindex_version 0.4.2
 %define ngx_fancyindex_module_path ngx-fancyindex-%{ngx_fancyindex_version}
@@ -153,7 +153,7 @@ It has been running on many heavily loaded Russian sites for more than two years
 
 %package -n vim-plugin-nginx
 Summary:        VIM support for nginx config files
-Group:          Productivity/Editors/Vi
+Group:          Productivity/Text/Editors
 %if 0%{?suse_version} > 1110
 BuildArch:      noarch
 %endif