- Refresh spec-file via spec-cleaner and manual optimizations.
- Use the ngx_* macros from the nginx-macros package to simplify
the spec file.
- Moved all the modules that support dynamic modules into their own
modules:
* nginx-module-geoip2
* nginx-module-fancyindex
* nginx-module-headers-more
- The rtmp module is replaced with nginx-module-http-flv
OBS-URL: https://build.opensuse.org/request/show/847130
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=183
- Update to 1.19.3
* https://nginx.org/en/CHANGES
* Add the ngx_stream_set_module.
* Add the "proxy_cookie_flags" directive.
* Add the "userid_flags" directive.
* Fix the "stale-if-error" cache control extension was erroneously
applied if backend returned a response with status code 500, 502,
503, 504, 403, 404, or 429.
* Fix "[crit] cache file ... has too long header" messages might
appear in logs if caching was used and the backend returned responses
with the "Vary" header line.
* Fix "[crit] SSL_write() failed" messages might appear in logs
when using OpenSSL 1.1.1.
* Fix "SSL_shutdown() failed (SSL: ... bad write retry)" messages
might appear in logs; the bug had appeared in 1.19.2.
* Fix a segmentation fault might occur in a worker process when
using HTTP/2 if errors with code 400 were redirected to a proxied
location using the "error_page" directive.
* Fix socket leak when using HTTP/2 and subrequests in the njs module.
OBS-URL: https://build.opensuse.org/request/show/839168
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=56
- Update to 1.19.3
* https://nginx.org/en/CHANGES
* Add the ngx_stream_set_module.
* Add the "proxy_cookie_flags" directive.
* Add the "userid_flags" directive.
* Fix the "stale-if-error" cache control extension was erroneously
applied if backend returned a response with status code 500, 502,
503, 504, 403, 404, or 429.
* Fix "[crit] cache file ... has too long header" messages might
appear in logs if caching was used and the backend returned responses
with the "Vary" header line.
* Fix "[crit] SSL_write() failed" messages might appear in logs
when using OpenSSL 1.1.1.
* Fix "SSL_shutdown() failed (SSL: ... bad write retry)" messages
might appear in logs; the bug had appeared in 1.19.2.
* Fix a segmentation fault might occur in a worker process when
using HTTP/2 if errors with code 400 were redirected to a proxied
location using the "error_page" directive.
* Fix socket leak when using HTTP/2 and subrequests in the njs module.
OBS-URL: https://build.opensuse.org/request/show/838765
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=177
- Update to 1.19.2
* https://nginx.org/en/CHANGES
* Now nginx starts closing keepalive connections before all free
worker connections are exhausted, and logs a warning about this
to the error log.
* Optimization of client request body reading when using chunked
transfer encoding.
* Memory leak if the "ssl_ocsp" directive was used.
* "zero size buf in output" alerts might appear in logs if a
FastCGI server returned an incorrect response; the bug had
appeared in 1.19.1.
* A segmentation fault might occur in a worker process if
different large_client_header_buffers sizes were used in
different virtual servers.
* SSL shutdown might not work.
* "SSL_shutdown() failed (SSL: ... bad write retry)" messages
might appear in logs.
* In the ngx_http_slice_module.
* In the ngx_http_xslt_filter_module.
OBS-URL: https://build.opensuse.org/request/show/826073
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=175
- Update to 1.19.1
* https://nginx.org/en/CHANGES
* The "lingering_close", "lingering_time", and "lingering_timeout"
directives now work when using HTTP/2.
* Now extra data sent by a backend are always discarded.
* Now after receiving a too short response from a FastCGI server
nginx tries to send the available part of the response
to the client, and then closes the client connection.
* Now after receiving a response with incorrect length from a
gRPC backend nginx stops response processing with an error.
* The "min_free" parameter of the "proxy_cache_path",
"fastcgi_cache_path", "scgi_cache_path",
and "uwsgi_cache_path" directives.
* nginx did not delete unix domain listen sockets during
graceful shutdown on the SIGQUIT signal.
* Zero length UDP datagrams were not proxied.
* Proxying to uwsgi backends using SSL might not work.
* In error handling when using the "ssl_ocsp" directive.
* On XFS and NFS file systems disk cache size might be
calculated incorrectly.
* "negative size buf in writer" alerts might appear in logs if
a memcached server returned a malformed response.
OBS-URL: https://build.opensuse.org/request/show/819472
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=172
- Update to 1.17.9
* https://nginx.org/en/CHANGES
* Now nginx does not allow several "Host" request header lines.
* nginx ignored additional "Transfer-Encoding" request header lines.
* Socket leak when using HTTP/2.
* A segmentation fault might occur in a worker process if OCSP
stapling was used.
* In the ngx_http_mp4_module.
* nginx used status code 494 instead of 400 if errors with code
494 were redirected with the "error_page" directive.
* Socket leak when using subrequests in the njs module and the
"aio" directive.
OBS-URL: https://build.opensuse.org/request/show/781491
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=158
* Feature: variables support in the "grpc_pass" directive.
* Bugfix: a timeout might occur while handling pipelined requests
in an SSL connection; the bug had appeared in 1.17.5.
* Bugfix: in the "debug_points" directive when using HTTP/2.
Thanks to Daniil Bondarev.
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=156
- Refresh spec-file via spec-cleaner.
- Add in service-file Wants=network-online.target (boo#1155690)
- Update to 1.17.7
* https://nginx.org/en/CHANGES
* A segmentation fault might occur on start or during
reconfiguration if the "rewrite" directive with an empty
replacement string was used in the configuration.
* A segmentation fault might occur in a worker process if the
"break" directive was used with the "alias" directive or with
the "proxy_pass" directive with a URI.
* The "Location" response header line might contain garbage if
the request URI was rewritten to the one containing a null character.
* Requests with bodies were handled incorrectly when returning redirections
with the "error_page" directive; the bug had appeared in 0.7.12.
* Socket leak when using HTTP/2.
* A timeout might occur while handling pipelined requests in an
SSL connection; the bug had appeared in 1.17.5.
* Bugfix in the ngx_http_dav_module.
OBS-URL: https://build.opensuse.org/request/show/759769
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=152
- Update to 1.17.4
* https://nginx.org/en/CHANGES
* Better detection of incorrect client behavior in HTTP/2.
* In handling of not fully read client request body when
returning errors in HTTP/2.
* The "worker_shutdown_timeout" directive might not work when
using HTTP/2.
* A segmentation fault might occur in a worker process when
using HTTP/2 and the "proxy_request_buffering" directive.
* The ECONNABORTED error log level was "crit" instead of
"error" on Windows when using SSL.
* nginx ignored extra data when using chunked transfer
encoding.
* nginx always returned the 500 error if the "return" directive
was used and an error occurred during reading client request body.
* In memory allocation error handling.
OBS-URL: https://build.opensuse.org/request/show/741628
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=144
- update to 1.17.3
- Security: when using HTTP/2 a client might cause excessive
memory consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).
- Bugfix: "zero size buf" alerts might appear in logs when using
gzipping; the bug had appeared in 1.17.2.
- Bugfix: a segmentation fault might occur in a worker process if
the "resolver" directive was used in SMTP proxy. (forwarded request 723395 from darix)
OBS-URL: https://build.opensuse.org/request/show/723397
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=39
- update to 1.17.3
- Security: when using HTTP/2 a client might cause excessive
memory consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).
- Bugfix: "zero size buf" alerts might appear in logs when using
gzipping; the bug had appeared in 1.17.2.
- Bugfix: a segmentation fault might occur in a worker process if
the "resolver" directive was used in SMTP proxy.
OBS-URL: https://build.opensuse.org/request/show/723395
OBS-URL: https://build.opensuse.org/package/show/server:http/nginx?expand=0&rev=142
