- Updated to 1.29.5
* https://nginx.org/en/CHANGES
* Fixed an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).
* Fixed use-after-free might occur after switching to the next gRPC or HTTP/2 backend.
* Fixed an invalid HTTP/2 request might be sent after switching to the next upstream.
* Fixed a response with multiple ranges might be larger than the source response.
* Fixed setting HTTP_HOST when proxying to FastCGI, SCGI, and uwsgi backends.
* Fixed warning when compiling with MSVC 2022 x86.
* Changed the logging level of the "ech_required" SSL error has been lowered from "crit" to "info".
OBS-URL: https://build.opensuse.org/request/show/1331529
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=305
- Updated to 1.29.5
* https://nginx.org/en/CHANGES
* Fixed an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642).
* Fixed use-after-free might occur after switching to the next gRPC or HTTP/2 backend.
* Fixed an invalid HTTP/2 request might be sent after switching to the next upstream.
* Fixed a response with multiple ranges might be larger than the source response.
* Fixed setting HTTP_HOST when proxying to FastCGI, SCGI, and uwsgi backends.
* Fixed warning when compiling with MSVC 2022 x86.
* Changed the logging level of the "ech_required" SSL error has been lowered from "crit" to "info".
OBS-URL: https://build.opensuse.org/request/show/1331527
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=304
- Updated to 1.29.4
* https://nginx.org/en/CHANGES
* Added the ngx_http_proxy_module supports HTTP/2.
* Added Encrypted ClientHello TLS extension support when using
OpenSSL ECH feature branch; the "ssl_ech_file" directive.
* Changed validation of host and port in the request line, "Host"
header field, and ":authority" pseudo-header field has been changed
to follow RFC 3986.
* Changed now a single LF used as a line terminator in a chunked
request or response body is considered an error.
* Fixed when using HTTP/3 with OpenSSL 3.5.1 or newer a segmentation
fault might occur in a worker process; the bug had appeared in 1.29.1.
* Fixed a segmentation fault might occur in a worker process if the
"try_files" directive and "proxy_pass" with a URI were used.
OBS-URL: https://build.opensuse.org/request/show/1321885
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=302
- Updated to 1.29.3
* Changed nginx-conf.patch file.
* https://nginx.org/en/CHANGES
* Added the "add_header_inherit" and "add_trailer_inherit" directives.
* Added the $request_port and $is_request_port variables.
* Added the $ssl_sigalg and $ssl_client_sigalg variables.
* Added the "volatile" parameter of the "geo" directive.
* Added now certificate compression is available with BoringSSL.
* Fixed now certificate compression is disabled with OCSP stapling.
OBS-URL: https://build.opensuse.org/request/show/1314088
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=300
- Updated to 1.29.2
* Changed nginx-conf.patch file.
* https://nginx.org/en/CHANGES
* Fixed now the "ssl_protocols" directive works in a virtual server
different from the default server when using OpenSSL 1.1.1 or newer.
* Fixed SSL handshake always failed when using TLSv1.3 with OpenSSL
and client certificates and resuming a session with a different SNI
value; the bug had appeared in 1.27.4.
* Fixed the "ignoring stale global SSL error" alerts might appear in
logs when using QUIC and the "ssl_reject_handshake" directive; the
bug had appeared in 1.29.0.
* Fixed in delta-seconds processing in the "Cache-Control" backend
response header line.
* Fixed an XCLIENT command didn't use the xtext encoding.
* Fixed in SSL certificate caching during reconfiguration.
OBS-URL: https://build.opensuse.org/request/show/1309711
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=298
- Updated to 1.29.1
* https://nginx.org/en/CHANGES
* Fixed processing of a specially crafted login/password when using
the "none" authentication method in the ngx_mail_smtp_module might
cause worker process memory disclosure to the authentication server
(CVE-2025-53859).
* Changed TLSv1.3 certificate compression is disabled by default.
* Added the "ssl_certificate_compression" directive.
* Added support for 0-RTT in QUIC when using OpenSSL 3.5.1 or newer.
* Fixed the 103 response might be buffered when using HTTP/2 and the
"early_hints" directive.
* Fixed in handling "Host" and ":authority" header lines with equal
values when using HTTP/2; the bug had appeared in 1.17.9.
* Fixed in handling "Host" header lines with a port when using HTTP/3.
* Fixed in the "none" parameter of the "smtp_auth" directive.
OBS-URL: https://build.opensuse.org/request/show/1299343
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=296
- Updated to 1.29.0
* https://nginx.org/en/CHANGES
* Added support for response code 103 from proxy and gRPC backends;
the "early_hints" directive.
* Added loading of secret keys from hardware tokens with OpenSSL provider.
* Changed the logging level of SSL errors in a QUIC handshake has been
changed from "error" to "crit" for critical errors, and to "info" for
the rest; the logging level of unsupported QUIC transport parameters
has been lowered from "info" to "debug".
* Disabled OpenSSL 3.5 QUIC API support by default.
OBS-URL: https://build.opensuse.org/request/show/1288817
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=291
- Changed URL's from nginx.org to github.com .
- Updated to 1.27.4
* https://nginx.org/en/CHANGES
* Fixed insufficient check in virtual servers handling with TLSv1.3
SNI allowed to reuse SSL sessions in a different virtual server, to
bypass client SSL certificates verification (CVE-2025-23419).
* Added the "ssl_object_cache_inheritable", "ssl_certificate_cache",
"proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
"uwsgi_ssl_certificate_cache", "keepalive_min_timeout" directives.
* Fixed nginx could not build libatomic library using the library
sources if the --with-libatomic=DIR option was used.
OBS-URL: https://build.opensuse.org/request/show/1243541
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=278
- Updated to 1.27.3
* https://github.com/nginx/nginx/releases/tag/release-1.27.3
* Added the "server" directive in the "upstream" block supports the "resolve" parameter.
* Added the "resolver" and "resolver_timeout" directives in the "upstream" block.
* Added SmarterMail specific mode support for IMAP LOGIN with
untagged CAPABILITY response in the mail proxy module.
* Changed TLSv1 and TLSv1.1 protocols are disabled by default.
* Changed IPv6 address in square brackets and no port can be specified in the
"proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind",
and "uwsgi_bind" directives, and as client address in ngx_http_realip_module.
* Fixed ngx_http_mp4_module and "proxy_store" directive.
OBS-URL: https://build.opensuse.org/request/show/1226762
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=276
- Updated to 1.27.2
* https://nginx.org/en/CHANGES
* Added SSL certificates, secret keys, and CRLs are now cached on start
or during reconfiguration.
* Added client certificate validation with OCSP in the stream module.
* Added OCSP stapling support in the stream module.
* Added the "proxy_pass_trailers" directive in the ngx_http_proxy_module.
* Added the "ssl_client_certificate" directive now supports certificates
with auxiliary information.
* Changed now the "ssl_client_certificate" directive is not required
for client SSL certificates verification.
OBS-URL: https://build.opensuse.org/request/show/1205363
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=274
- Renamed nginx-1.6.1-default_config.patch to nginx-conf.patch.
- Renamed nginx-1.2.4-perl_vendor_install.patch to nginx-perl.patch.
- Used atosetup -p1 macro and replaced editor from perl to sed.
- Added %check section with gpg signature source verification.
- Updated to 1.27.1
* https://nginx.org/en/CHANGES
* Fixed crash in ngx_http_mp4_module via specially crafted mp4 file (CVE-2024-7347).
* Now the stream module handler is not mandatory.
* Fixed new HTTP/2 connections might ignore graceful shutdown of old worker processes.
OBS-URL: https://build.opensuse.org/request/show/1194199
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=270
- Renamed nginx-1.6.1-default_config.patch to nginx-conf.patch.
- Renamed nginx-1.2.4-perl_vendor_install.patch to nginx-perl.patch.
- Used atosetup -p1 macro and replaced editor from perl to sed.
- Added %check section with gpg signature source_verification.
- Updated to 1.27.1
* https://nginx.org/en/CHANGES
* Fixed crash in ngx_http_mp4_module via specially crafted mp4 file (CVE-2024-7347).
* Now the stream module handler is not mandatory.
* Fixed new HTTP/2 connections might ignore graceful shutdown of old worker processes.
OBS-URL: https://build.opensuse.org/request/show/1194197
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=269
- Renamed nginx-1.6.1-default_config.patch to nginx-conf.patch.
- Renamed nginx-1.2.4-perl_vendor_install.patch to nginx-perl.patch.
- Used atosetup -p1 macro and replaced editor from perl to sed.
- Updated to 1.27.1
* https://nginx.org/en/CHANGES
* Fixed crash in ngx_http_mp4_module via specially crafted mp4 file (CVE-2024-7347).
* Now the stream module handler is not mandatory.
* Fixed new HTTP/2 connections might ignore graceful shutdown of old worker processes.
OBS-URL: https://build.opensuse.org/request/show/1194190
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=268
- Updated to 1.25.4
* Changed nginx.keyring to Sergey Kandaurov’s PGP public key.
* https://nginx.org/en/CHANGES
* Fixed segmentation fault might occur in a worker process while
processing a specially crafted QUIC session (CVE-2024-24989, CVE-2024-24990).
* Fixed connections with pending AIO operations might be closed
prematurely during graceful shutdown of old worker processes.
* Fixed socket leak alerts no longer logged when fast shutdown was
requested after graceful shutdown of old worker processes.
* Fixed socket descriptor error, a socket leak, or a segmentation fault
in a worker process might occur if AIO was used in a subrequest.
* Fixed segmentation fault might occur in a worker process if SSL
proxying was used along with the "image_filter" directive and errors
with code 415 were redirected with the "error_page" directive.
OBS-URL: https://build.opensuse.org/request/show/1147448
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=250
- Updated to 1.25.4
* Changed nginx.keyring to nginx public key.
* https://nginx.org/en/CHANGES
* Fixed segmentation fault might occur in a worker process while
processing a specially crafted QUIC session (CVE-2024-24989, CVE-2024-24990).
* Fixed connections with pending AIO operations might be closed
prematurely during graceful shutdown of old worker processes.
* Fixed socket leak alerts no longer logged when fast shutdown was
requested after graceful shutdown of old worker processes.
* Fixed socket descriptor error, a socket leak, or a segmentation fault
in a worker process might occur if AIO was used in a subrequest.
* Fixed segmentation fault might occur in a worker process if SSL
proxying was used along with the "image_filter" directive and errors
with code 415 were redirected with the "error_page" directive.
OBS-URL: https://build.opensuse.org/request/show/1147446
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=249
- Updated to 1.25.4
* https://nginx.org/en/CHANGES
* Fixed segmentation fault might occur in a worker process while
processing a specially crafted QUIC session (CVE-2024-24989, CVE-2024-24990).
* Fixed connections with pending AIO operations might be closed
prematurely during graceful shutdown of old worker processes.
* Fixed socket leak alerts no longer logged when fast shutdown was
requested after graceful shutdown of old worker processes.
* Fixed socket descriptor error, a socket leak, or a segmentation fault
in a worker process might occur if AIO was used in a subrequest.
* Fixed segmentation fault might occur in a worker process if SSL
proxying was used along with the "image_filter" directive and errors
with code 415 were redirected with the "error_page" directive.
OBS-URL: https://build.opensuse.org/request/show/1147439
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=248
- Updated to 1.25.3
* https://nginx.org/en/CHANGES
* Changed: improved detection of misbehaving clients when using HTTP/2.
* Added: startup speedup when using a large number of locations.
* Fixed: a segmentation fault might occur in a worker process when
using HTTP/2 without SSL; the bug had appeared in 1.25.1.
* Fixed: the "Status" backend response header line with an empty
reason phrase was handled incorrectly.
* Fixed: memory leak during reconfiguration when using the PCRE2 library.
OBS-URL: https://build.opensuse.org/request/show/1120595
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=246
- Changed nginx.keyring to Konstantin Pavlov’s PGP public key.
- Removed nginx.init.
- Updated to 1.23.0
* https://nginx.org/en/CHANGES
* Now header lines are represented as linked lists.
* Now nginx combines arbitrary header lines with identical
names when sending to FastCGI, SCGI, and uwsgi backends, in the
$r->header_in() method of the ngx_http_perl_module, and during lookup
of the "$http_...", "$sent_http_...", "$sent_trailer_...",
"$upstream_http_...", and "$upstream_trailer_..." variables.
* Fixed: if there were multiple "Vary" header lines in the backend
response, nginx only used the last of them when caching.
* Fixed: if there were multiple "WWW-Authenticate" header lines in the
backend response and errors with code 401 were intercepted or the
"auth_request" directive was used, nginx only sent the first of the
header lines to the client.
* The logging level of the "application data after close
notify" SSL errors has been lowered from "crit" to "info".
* Fixed: connections might hang if nginx was built on Linux 2.6.17 or
newer, but was used on systems without EPOLLRDHUP support, notably
with epoll emulation layers; the bug had appeared in 1.17.5.
* Fixed: nginx did not cache the response if the "Expires" response
header line disabled caching, but following "Cache-Control" header
line enabled caching.
OBS-URL: https://build.opensuse.org/request/show/984277
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=229
- Updated nginx.keyring.
- Removed nginx.init.
- Updated to 1.23.0
* https://nginx.org/en/CHANGES
* Now header lines are represented as linked lists.
* Now nginx combines arbitrary header lines with identical
names when sending to FastCGI, SCGI, and uwsgi backends, in the
$r->header_in() method of the ngx_http_perl_module, and during lookup
of the "$http_...", "$sent_http_...", "$sent_trailer_...",
"$upstream_http_...", and "$upstream_trailer_..." variables.
* Fixed: if there were multiple "Vary" header lines in the backend
response, nginx only used the last of them when caching.
* Fixed: if there were multiple "WWW-Authenticate" header lines in the
backend response and errors with code 401 were intercepted or the
"auth_request" directive was used, nginx only sent the first of the
header lines to the client.
* The logging level of the "application data after close
notify" SSL errors has been lowered from "crit" to "info".
* Fixed: connections might hang if nginx was built on Linux 2.6.17 or
newer, but was used on systems without EPOLLRDHUP support, notably
with epoll emulation layers; the bug had appeared in 1.17.5.
* Fixed: nginx did not cache the response if the "Expires" response
header line disabled caching, but following "Cache-Control" header
line enabled caching.
OBS-URL: https://build.opensuse.org/request/show/984271
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=227
- Updated nginx.keyring.
- Updated to 1.23.0
* https://nginx.org/en/CHANGES
* Now header lines are represented as linked lists.
* Now nginx combines arbitrary header lines with identical
names when sending to FastCGI, SCGI, and uwsgi backends, in the
$r->header_in() method of the ngx_http_perl_module, and during lookup
of the "$http_...", "$sent_http_...", "$sent_trailer_...",
"$upstream_http_...", and "$upstream_trailer_..." variables.
* Fixed: if there were multiple "Vary" header lines in the backend
response, nginx only used the last of them when caching.
* Fixed: if there were multiple "WWW-Authenticate" header lines in the
backend response and errors with code 401 were intercepted or the
"auth_request" directive was used, nginx only sent the first of the
header lines to the client.
* The logging level of the "application data after close
notify" SSL errors has been lowered from "crit" to "info".
* Fixed: connections might hang if nginx was built on Linux 2.6.17 or
newer, but was used on systems without EPOLLRDHUP support, notably
with epoll emulation layers; the bug had appeared in 1.17.5.
* Fixed: nginx did not cache the response if the "Expires" response
header line disabled caching, but following "Cache-Control" header
line enabled caching.
OBS-URL: https://build.opensuse.org/request/show/984266
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=226
