Commit Graph

301 Commits

Author SHA1 Message Date
Troy Dawson
7da8f1b51b Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
2024-10-29 08:51:42 -07:00
Troy Dawson
7dc963ff3d Bump release for Aug 2024 perl mass rebuild
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2024-08-08 04:29:27 -07:00
Luboš Uhliarik
9ab1ebc738 Compile perl module with -O2 optimalization 2024-07-31 17:53:10 +02:00
Luboš Uhliarik
42bea43805 Add -O2 to nginx.so 2024-07-31 15:38:30 +02:00
Luboš Uhliarik
982a1dba7e Resolves: RHEL-33742 - Disable ENGINE support by default
- disable ENGINE support by default
- add engine bcond
2024-07-02 20:21:17 +02:00
Troy Dawson
2cc1d88318 Bump release for June 2024 mass rebuild 2024-06-24 09:04:49 -07:00
Luboš Uhliarik
c5e0b20565 Update to 1.26.1
Resolves: RHEL-39595 - nginx: undisclosed QUIC packets can cause NGINX
worker processes to leak previously freed memory (CVE-2024-34161)

Resolves: RHEL-39594 - nginx: undisclosed HTTP/3 requests can cause
NGINX worker processes to terminate (CVE-2024-31079)

Resolves: RHEL-39592 - nginx: undisclosed HTTP/3 encoder instructions
terminate or cause or other potential impact (CVE-2024-32760)

Resolves: RHEL-39591 - nginx: undisclosed HTTP/3 requests can cause
NGINX worker processes to terminate (CVE-2024-35200)
2024-06-03 15:07:09 +02:00
Luboš Uhliarik
b7507d2ec7 bump package epoch to resolve RHEL-39448
Resolves: RHEL-39448 - Update path for nginx broken for existing CS
  installations
2024-05-31 00:33:38 +02:00
Branislav Náter
1ccf095603 CI configuration and test plans 2024-05-24 17:48:36 +00:00
Luboš Uhliarik
21d57124fa update to 1.26.0
- add Sergey Kandaurov's PGP public key
- add Roman Arutyunyan's PGP public key
- remove Maxim Dounin's PGP public key
- enable experimental HTTP/3 module
- refresh patches
- update default config http2 directive
- remove outdated custom error pages, reducing maintenance burden
2024-05-23 23:07:44 +02:00
Fedora Release Engineering
a1782b1ee5 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 08:58:02 +00:00
Fedora Release Engineering
2be58896ba Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 09:41:18 +00:00
Felix Kaechele
c031771131
Use SPDX license identifier in License tag
Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2023-09-09 15:31:43 -04:00
Luboš Uhliarik
4aa5353117 Related: #2224582 - Running nginx with systemctl and entering ssl private key's pass phrase
Move nginx-ssl-pass-dialog helper script from core package to the main
one, because of the systemd dependency.
2023-08-07 14:12:30 +02:00
Luboš Uhliarik
bd90c5a568 Resolves: #2224582 - Running nginx with systemctl and entering ssl private key's pass phrase
- added new ssl_pass_phrase_dialog directive which enables setting
external program for entering password for encrypted private key
2023-07-21 17:35:13 +02:00
Fedora Release Engineering
3acdc299e9 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 16:39:42 +00:00
Jitka Plesnikova
a238213a75 Perl 5.38 rebuild 2023-07-11 15:34:05 +02:00
Felix Kaechele
ef40967cd2 update to 1.24.0
- update maxim.key (same key, new expiry date)

Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2023-04-11 17:38:00 -04:00
Felix Kaechele
f09169a288 Convert to %autorelease and %autochangelog
[skip changelog]
2023-04-11 17:25:55 -04:00
Fedora Release Engineering
7ed182cdd3 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 21:34:41 +00:00
Jitka Plesnikova
5c168fbc1c Remove perl(MODULE_COMPAT), it will be replaced by generators 2023-01-13 09:51:07 +01:00
Felix Kaechele
7cd8bf6ab9 update 1.22.1
build against OpenSSL 3 on EL8
enable kTLS support

Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2022-10-19 12:10:40 -04:00
Felix Kaechele
80d334f680 fix typos in nginx.conf
These had already been fixed in the non-SSL server block

Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2022-08-17 20:35:24 -04:00
Joe Orton
2769972c79 Reduce differences with upstream default configuration:
1. reduce default error_log severity to "notice" from implicit
   default level of "error" (more verbosity by default).
2. remove "tcp_nodelay on" since "on" is the default setting.
2022-08-16 11:10:58 +01:00
Danila Vershinin
0e8fc9c4a8 Update README.dynamic
Fix path of glob for config files.
2022-08-08 00:29:47 +00:00
Fedora Release Engineering
3630270cc9 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 00:33:43 +00:00
Luboš Uhliarik
a36353232d Fix nginx downgrade issue after introducing core sub-package 2022-06-28 00:46:27 +02:00
Jitka Plesnikova
5806fd70eb Perl 5.36 rebuild 2022-05-30 19:48:19 +02:00
Felix Kaechele
4c725813a0 update to 1.22.0
switch to pcre2
drop CVE-2021-3618 patch, it's upstreamed
add signing key of Konstantin Pavlov
add stream_geoip_module and stream_realip_module

Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2022-05-25 08:01:57 -04:00
Luboš Uhliarik
f8f18d5dc4 Remove redundant requires of openssl package 2022-03-29 03:00:27 +02:00
Luboš Uhliarik
ddc12361e1 - require openssl-libs package from nginx-core 2022-03-28 21:51:15 +02:00
Honza Horak
bcc32b6d95 Introduce core sub-package for having a daemon only with a minimal footprint 2022-03-25 15:19:21 +01:00
Fedora Release Engineering
8a38d38b97 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 21:11:45 +00:00
Felix Kaechele
f106fd919a add sources for 1.20.2
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-12-21 14:12:47 +01:00
Felix Kaechele
221b2267d2 update to 1.20.2
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-12-16 20:05:41 -05:00
Felix Kaechele
dc7e730037 fix installation of nginxmods.attr for EPEL 7
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-10-18 19:47:54 -04:00
Felix Kaechele
3ba5cb0faa Fix "file size changed while zipping" when rotating logs (rhbz#1980948,2015249,2015243)
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-10-18 18:55:11 -04:00
Sahana Prasad
0c7690e709 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:09:08 +02:00
Iveta Cesalova
447ae7f26a Adding tmt plan 2021-08-15 15:23:11 +00:00
Neal Gompa
f1c10bd5e4 Add -mod-devel subpackage for building external nginx modules (rhbz#1989778)
This change makes it possible to easily build third-party modules as RPMs
on top of the nginx package.

Per the constraints defined by NGINX upstream on binary compatibility for
external third-party modules, we include generators to add an ABI dependency
automatically.
2021-08-10 12:30:05 -04:00
Luboš Uhliarik
e4bc2afa65 Add symlink used by system-logos-httpd 2021-08-09 16:31:16 +02:00
Fedora Release Engineering
9b08ea197b - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 16:07:29 +00:00
Felix Kaechele
dc9dfb7a27 fix for CVE-2021-3618 (rhbz#1975651)
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-06-24 21:31:53 -04:00
Felix Kaechele
f0de5036a7 use different fix for rhbz#1683388 as it introduced permissions issues in 1:1.20.0-2
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-06-01 13:28:30 -04:00
Felix Kaechele
72036acd97 update to 1.20.1 (fixes CVE-2021-23017) 2021-05-25 12:11:40 -04:00
Jitka Plesnikova
38fdeddda4 Perl 5.34 rebuild 2021-05-21 13:01:53 +02:00
Lubos Uhliarik
e9edae1e99 Related: #1636235 - centralizing default index.html on nginx
- change symlink destination to make it work on multiple distros, not only on Fedora
2021-04-30 13:41:04 +02:00
Felix Kaechele
f935cbcf8d sync rawhide and EPEL7 spec files again
systemd service reload now checks config file (rhbz#1565377)
drop nginx requirement on nginx-all-modules (rhbz#1708799)
let nginx handle log creation on logrotate (rhbz#1683388)
have log directory owned by root (rhbz#1390183, CVE-2016-1247)
remove obsolete --with-ipv6 (src PR#8)
correction: pcre2 is actually not supported by nginx, reintroduce pcre
2021-04-21 12:08:00 -04:00
Felix Kaechele
d1fd6c2b93 update to 1.20.0
sync with mainline spec file
order configure options alphabetically for easier comparinggit
add --with-compat option (rhbz#1834452)
add patch to fix PIDFile race condition (rhbz#1869026)
use pcre2 instead of pcre (rhbz#1938984)
add Wants=network-online.target to systemd unit (rhbz#1943779)
2021-04-20 22:04:06 -04:00
Lubos Uhliarik
cdbbf72f9e Resolves: #1931402 - drop gperftools module 2021-02-22 17:59:18 +01:00