Accepting request 879894 from server:http

- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.

OBS-URL: https://build.opensuse.org/request/show/879894
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=61

nginx-1.19.7.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7ae4dd020c41d3a5e1e6a8578fcc60e508e3e27e7668e845ddc87a05a775b50e
-size 1056631

nginx-1.19.7.tar.gz.asc

@@ -1,10 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEcBAABCAAGBQJgK+wFAAoJEFIKmZOhwFL4tQMIAIpgYaTZuIYidhZ9YzVlzRKl
-U94KBm49k86YPYpb/uUoODPuXR9j1xb/QXHe3J8XGATqEyNmqdTin+yfXqCoyFuo
-eHLB4cDPEvFowZYbxPgiF8PWoG5v6IN2ZgOks4tcPiWhqe2YTrx33B6HOz42TSVY
-XUHnGVwVCsY/J7N6Vr8+TjnEXZgPn4S0YSTwIi14zQj4WuMMRin+yqkaZek2WKjj
-OtWrqzFBaJmykEGJqmllRvxFb/wOVK/vIO4wpPuJxmDJvV/v+byLqo13UvZeu5jq
-HrhvUpZXkoWojxnGkAnK0qGbdDR/cqY7QlEKV/Zh4eMvpVuJvBRFjAVNJkHP/3k=
-=fAVa
------END PGP SIGNATURE-----

nginx-1.19.8.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:308919b1a1359315a8066578472f998f14cb32af8de605a3743acca834348b05
+size 1060155

nginx-1.19.8.tar.gz.asc

@@ -0,0 +1,10 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEcBAABCAAGBQJgR5RcAAoJEFIKmZOhwFL4AA4H+gPI9gvhsZ1wmqTqKKYQyPhX
+LJu9ezZFk4ChibjTHJuc37WucTZu/azcc2QGhGxJfGsFbFasY7As1gYygjpLMA+1
+Wa8Kh//he2o0IPdPKJ9rvvkDPntUz2YX3p9+VqZaLBCuhU/bnBQmHQHEmeo3xZGE
+59Qe8OpRollja5HbtxWkhtB3bKgLeSddfFgJC5IJDov7dh9qrLUiDDn7paKE9foj
+IMDz/bSDUYD4wx7r+tby0B4t8zja2jvA+y8FGnPC8raCULyrawHzkSJ1R4bgOk7F
+5jfqxyazt/1d0LgTT+5EWaBBwhMv004twfvHYpsABvUBt5jJxRxBO5kQUvKDCgc=
+=VRI5
+-----END PGP SIGNATURE-----

nginx.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Fri Mar 12 20:17:06 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.19.8:
+  * Feature: flags in the "proxy_cookie_flags" directive can now contain
+    variables.
+  * Feature: the "proxy_protocol" parameter of the "listen" directive,
+    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
+  * Bugfix: HTTP/2 connections were immediately closed when using
+    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
+  * Bugfix: some errors were logged as unknown if nginx was built with
+    glibc 2.32.
+  * Bugfix: in the eventport method.
+
 -------------------------------------------------------------------
 Sat Feb 27 12:04:02 UTC 2021 - Илья Индиго <ilya@ilya.pp.ua>
 
@@ -276,6 +290,8 @@ Sat Dec 28 11:03:16 UTC 2019 - Илья Индиго <ilya@ilya.pp.ua>
   * A timeout might occur while handling pipelined requests in an
     SSL connection; the bug had appeared in 1.17.5.
   * Bugfix in the ngx_http_dav_module.
+  * CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
+    configurations which could have allowed unauthorized web page reads (bsc#1160682).
 
 -------------------------------------------------------------------
 Sat Nov 23 20:12:57 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>

nginx.spec

@@ -23,7 +23,7 @@
 %bcond_with    ngx_google_perftools
 #
 Name:           nginx
-Version:        1.19.7
+Version:        1.19.8
 Release:        0
 Summary:        A HTTP server and IMAP/POP3 proxy server
 License:        BSD-2-Clause