rpms/nginx
7
0
Fork 2
Code Issues Pull Requests Releases Activity
46 Commits 68 Branches 185 Tags 5.2 MiB
c9s
Commit Graph

46 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Luboš Uhliarik
dc79564477 Resolves: RHEL-178683 - nginx: code execution and denial of 
service (CVE-2026-9256)
Resolves: RHEL-182551 - nginx: HTTP/2: Remote Denial of Service via
  compression bomb and Slowloris-style attack
Resolves: RHEL-188407 - nginx: NGINX: Arbitrary code execution or.
  Denial of Service via heap-based buffer overflow with crafted HTTP/2
  headers (CVE-2026-42055)
 2026-07-20 11:31:38 +02:00
Luboš Uhliarik
73046468c4 Resolves: RHEL-176221 - nginx: NGINX: Arbitrary Code Execution 
Vulnerability (CVE-2026-42945)
 2026-05-21 11:46:01 +02:00
pdancak
7b54278843 RHEL-157891 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files 
Resolves: RHEL-157891

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
 2026-04-14 14:34:50 +02:00
pdancak
ab4f9d9a3b RHEL-159450 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled 
Resolves: RHEL-159450

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
 2026-04-14 14:34:50 +02:00
pdancak
8bdb892b28 RHEL-159542 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file 
Resolves: RHEL-159542

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
 2026-04-14 14:34:50 +02:00
pdancak
6f618941b5 RHEL-159563 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module 
Resolves: RHEL-159563

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
 2026-04-14 14:34:40 +02:00
Luboš Uhliarik
2ec55f3e43 Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via 
man-in-the-middle attack on TLS proxied connection
 2026-02-17 15:30:14 +01:00
Luboš Uhliarik
730025f7b6 Resolves: RHEL-145177 - Clarify binding behavior of -t option 2026-01-29 17:30:01 +01:00
Luboš Uhliarik
5e4ef9bcbf Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 2025-11-20 13:35:33 +01:00
Luboš Uhliarik
0c4f4b3473 Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log 
is not created when updating system in image mode
 2025-11-19 19:07:17 +01:00
Luboš Uhliarik
72c0c46290 Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause 
denial of service (CVE-2024-7347)
 2025-05-15 01:02:06 +02:00
Luboš Uhliarik
9a55e6d8d0 Resolves: RHEL-85556 - nginx: Memory disclosure in the 
ngx_http_mp4_module (CVE-2022-41742)
Resolves: RHEL-91446 - nginx: Memory corruption in the
  ngx_http_mp4_module (CVE-2022-41741)
 2025-05-15 01:01:10 +02:00
Luboš Uhliarik
9a01992a0c Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER 
at nginx with reverse-proxy
 2025-04-24 15:12:35 +02:00
Luboš Uhliarik
d3249a24dd Resolves: RHEL-78236 - nginx: TLS Session Resumption 
Vulnerability (CVE-2025-23419)
 2025-02-13 12:59:06 +01:00
Luboš Uhliarik
ae74f4cfd8 Use systemd-sysusers 
Resolves: RHEL-77486 - [RFE] nginx use systemd-sysusers
 2025-02-05 19:11:24 +01:00
Luboš Uhliarik
27c12133bd Resolves: RHEL-40075 - nginx worker processes memory leak 2024-07-16 00:52:21 +02:00
Luboš Uhliarik
d712ca8749 Fix bug reference 
Resolves: openssl 3.2 ENGINE regression in nginx
 2024-06-12 11:08:41 +02:00
Luboš Uhliarik
97f68c9c18 Resolves: RHEL-36755 - openssl 3.2 ENGINE regression 2024-06-10 18:44:36 +02:00
Luboš Uhliarik
80ab6cb25c bump package epoch to resolve RHEL-33939 
Resolves: RHEL-33939 - Update path for nginx broken for existing CS
  installations
 2024-05-30 23:36:52 +02:00
Luboš Uhliarik
ba34be46ff Related: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are 
vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

- bump version so it can be rebuilt using centpkg build --rhel-target zstream
 2023-10-16 20:43:23 +02:00
Luboš Uhliarik
ba15c0f4a4 Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are 
vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
 2023-10-16 19:42:42 +02:00
Luboš Uhliarik
fef0a05b6b Resolves: #2086527 - Fix logrotate config and nginx log dir permissions 2022-11-24 13:34:51 +01:00
Luboš Uhliarik
a7fa9601f1 Related: #2099752 - Fix downgrade issue after introducing nginx core 
sub-package.
 2022-06-28 01:07:03 +02:00
Luboš Uhliarik
d7f9bb7d10 Resolves: #2099752 - nginx minimisation for ubi-micro 2022-06-22 11:32:10 +02:00
Luboš Uhliarik
24ddaef1c3 Related: #2028781 - Protocol : TLSv1.3 missing in rhel9 
- fix typo in preprocesor macro if -> ifdef
 2022-06-21 14:13:26 +02:00
Luboš Uhliarik
43d5c51691 Resolves: #2028781 - Protocol : TLSv1.3 missing in rhel9 2022-06-21 13:57:27 +02:00
Luboš Uhliarik
eadc7868df Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol 
Confusion Analyzing and Mitigating Cracks in TLS Authentication
 2022-02-02 20:47:07 +01:00
Joe Orton
64bb1908b9 add delaycompress to logrotate config (#2015250) 
Resolves: rhbz#2015250
 2021-12-02 17:14:11 +00:00
Luboš Uhliarik
af7c1c8756 Resolves: #2007019 - use proper wording in error pages 2021-09-23 00:28:41 +02:00
Luboš Uhliarik
1365117847 Resolves: #2006420 - Broken loading certificates from hardware token (PKCS#11) 2021-09-22 16:37:10 +02:00
Luboš Uhliarik
0b6d4f6992 Resolves: #2006822 - Hardening tests fail for nginx 2021-09-22 16:04:14 +02:00
Luboš Uhliarik
8c68a3ba02 Remove created gpg and add it to .gitignore 
Related: rhbz#1991720 (Neal Gompa)
 2021-09-21 16:56:07 +02:00
Luboš Uhliarik
9fc90aea8b Add -mod-devel subpackage for building external nginx modules 
Resolves: rhbz#1991720 (Neal Gompa)
 2021-09-21 16:05:28 +02:00
Mohan Boddu
d98757e643 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags 
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-08-09 22:33:02 +00:00
Luboš Uhliarik
74db40530a Resolves: #1991600 - Add logo symlink required by new testpage 2021-08-09 15:55:36 +02:00
Mohan Boddu
fbdace7b55 Rebuilt for RHEL 9 BETA for openssl 3.0 
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-06-16 03:32:51 +00:00
Luboš Uhliarik
c8b5cc4b56 new version 1.20.1 
Resolves: #1964814 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy()
  when labels are followed by a pointer to a root domain name
 2021-06-02 15:57:02 +02:00
Lubos Uhliarik
2789e091e0 Fix gating.yaml for RHEL-9. 2021-04-30 13:31:40 +00:00
Lubos Uhliarik
13c72f3476 Resolves: #1955564 - [RFE] Support loading certificates from hardware 
token (PKCS#11)
 2021-04-30 13:30:49 +00:00
Lubos Uhliarik
99addd9769 Resolves: #1955560 - centralizing default index.html on nginx 2021-04-30 12:04:12 +00:00
Lubos Uhliarik
8e7aa8c830 Resolve: #1953639 - Rebase nginx to 1.20 2021-04-26 15:42:27 +00:00
Mohan Boddu
1fd7d27e7a - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-04-16 02:26:37 +00:00
DistroBaker
35ba4343b4 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/nginx.git#cdbbf72f9e6b5ba3a2c8074d3dcad4ec4a9d6f3c
 2021-02-22 17:30:48 +00:00
DistroBaker
8b6e073af8 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/nginx.git#4efda91377eb4352ca840e0868ac121796354ddb
 2021-02-03 00:42:49 +00:00
Petr Šabata
497c396bdb RHEL 9.0.0 Alpha bootstrap 
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/nginx#bd726b71e50db2c0a3eabdfecd1ec3b8cfefeb08
 2020-10-15 21:06:25 +02:00
Release Configuration Management
9bc60fa724 New branch setup 2020-10-08 18:33:38 +00:00