Commit Graph

306 Commits

Author SHA1 Message Date
Luboš Uhliarik
90d4dba563 New version 1.26.3
Resolves: RHEL-78233 - CVE-2025-23419 nginx: TLS Session Resumption Vulnerability
2025-02-06 21:50:18 +01:00
Luboš Uhliarik
3ac52f1966 Use systemd-sysusers
Resolves: RHEL-6770 - [RFE] nginx use systemd-sysusers
2025-02-05 18:28:49 +01:00
Luboš Uhliarik
ea558a61dd Add zlib-ng patch to fix RHEL-77911
Resolves: RHEL-77911 - nginx-1.26.2 incompatibility with zlib-ng 2.2.3
2025-02-04 19:28:24 +01:00
Joe Orton
26626a2b5d Add systemd instantiated service nginx@.service, allowing e.g.
"systemctl start nginx@foobar.service" to start an instance of
nginx using /etc/nginx/foobar.conf as the configuration.
2024-12-17 10:04:18 +00:00
Felix Kaechele
4e6163260f Update to 1.26.2
- fixes CVE-2024-7347
2024-12-17 10:02:54 +00:00
Troy Dawson
7da8f1b51b Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
2024-10-29 08:51:42 -07:00
Troy Dawson
7dc963ff3d Bump release for Aug 2024 perl mass rebuild
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2024-08-08 04:29:27 -07:00
Luboš Uhliarik
9ab1ebc738 Compile perl module with -O2 optimalization 2024-07-31 17:53:10 +02:00
Luboš Uhliarik
42bea43805 Add -O2 to nginx.so 2024-07-31 15:38:30 +02:00
Luboš Uhliarik
982a1dba7e Resolves: RHEL-33742 - Disable ENGINE support by default
- disable ENGINE support by default
- add engine bcond
2024-07-02 20:21:17 +02:00
Troy Dawson
2cc1d88318 Bump release for June 2024 mass rebuild 2024-06-24 09:04:49 -07:00
Luboš Uhliarik
c5e0b20565 Update to 1.26.1
Resolves: RHEL-39595 - nginx: undisclosed QUIC packets can cause NGINX
worker processes to leak previously freed memory (CVE-2024-34161)

Resolves: RHEL-39594 - nginx: undisclosed HTTP/3 requests can cause
NGINX worker processes to terminate (CVE-2024-31079)

Resolves: RHEL-39592 - nginx: undisclosed HTTP/3 encoder instructions
terminate or cause or other potential impact (CVE-2024-32760)

Resolves: RHEL-39591 - nginx: undisclosed HTTP/3 requests can cause
NGINX worker processes to terminate (CVE-2024-35200)
2024-06-03 15:07:09 +02:00
Luboš Uhliarik
b7507d2ec7 bump package epoch to resolve RHEL-39448
Resolves: RHEL-39448 - Update path for nginx broken for existing CS
  installations
2024-05-31 00:33:38 +02:00
Branislav Náter
1ccf095603 CI configuration and test plans 2024-05-24 17:48:36 +00:00
Luboš Uhliarik
21d57124fa update to 1.26.0
- add Sergey Kandaurov's PGP public key
- add Roman Arutyunyan's PGP public key
- remove Maxim Dounin's PGP public key
- enable experimental HTTP/3 module
- refresh patches
- update default config http2 directive
- remove outdated custom error pages, reducing maintenance burden
2024-05-23 23:07:44 +02:00
Fedora Release Engineering
a1782b1ee5 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 08:58:02 +00:00
Fedora Release Engineering
2be58896ba Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 09:41:18 +00:00
Felix Kaechele
c031771131
Use SPDX license identifier in License tag
Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2023-09-09 15:31:43 -04:00
Luboš Uhliarik
4aa5353117 Related: #2224582 - Running nginx with systemctl and entering ssl private key's pass phrase
Move nginx-ssl-pass-dialog helper script from core package to the main
one, because of the systemd dependency.
2023-08-07 14:12:30 +02:00
Luboš Uhliarik
bd90c5a568 Resolves: #2224582 - Running nginx with systemctl and entering ssl private key's pass phrase
- added new ssl_pass_phrase_dialog directive which enables setting
external program for entering password for encrypted private key
2023-07-21 17:35:13 +02:00
Fedora Release Engineering
3acdc299e9 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 16:39:42 +00:00
Jitka Plesnikova
a238213a75 Perl 5.38 rebuild 2023-07-11 15:34:05 +02:00
Felix Kaechele
ef40967cd2 update to 1.24.0
- update maxim.key (same key, new expiry date)

Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2023-04-11 17:38:00 -04:00
Felix Kaechele
f09169a288 Convert to %autorelease and %autochangelog
[skip changelog]
2023-04-11 17:25:55 -04:00
Fedora Release Engineering
7ed182cdd3 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 21:34:41 +00:00
Jitka Plesnikova
5c168fbc1c Remove perl(MODULE_COMPAT), it will be replaced by generators 2023-01-13 09:51:07 +01:00
Felix Kaechele
7cd8bf6ab9 update 1.22.1
build against OpenSSL 3 on EL8
enable kTLS support

Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2022-10-19 12:10:40 -04:00
Felix Kaechele
80d334f680 fix typos in nginx.conf
These had already been fixed in the non-SSL server block

Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2022-08-17 20:35:24 -04:00
Joe Orton
2769972c79 Reduce differences with upstream default configuration:
1. reduce default error_log severity to "notice" from implicit
   default level of "error" (more verbosity by default).
2. remove "tcp_nodelay on" since "on" is the default setting.
2022-08-16 11:10:58 +01:00
Danila Vershinin
0e8fc9c4a8 Update README.dynamic
Fix path of glob for config files.
2022-08-08 00:29:47 +00:00
Fedora Release Engineering
3630270cc9 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 00:33:43 +00:00
Luboš Uhliarik
a36353232d Fix nginx downgrade issue after introducing core sub-package 2022-06-28 00:46:27 +02:00
Jitka Plesnikova
5806fd70eb Perl 5.36 rebuild 2022-05-30 19:48:19 +02:00
Felix Kaechele
4c725813a0 update to 1.22.0
switch to pcre2
drop CVE-2021-3618 patch, it's upstreamed
add signing key of Konstantin Pavlov
add stream_geoip_module and stream_realip_module

Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2022-05-25 08:01:57 -04:00
Luboš Uhliarik
f8f18d5dc4 Remove redundant requires of openssl package 2022-03-29 03:00:27 +02:00
Luboš Uhliarik
ddc12361e1 - require openssl-libs package from nginx-core 2022-03-28 21:51:15 +02:00
Honza Horak
bcc32b6d95 Introduce core sub-package for having a daemon only with a minimal footprint 2022-03-25 15:19:21 +01:00
Fedora Release Engineering
8a38d38b97 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 21:11:45 +00:00
Felix Kaechele
f106fd919a add sources for 1.20.2
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-12-21 14:12:47 +01:00
Felix Kaechele
221b2267d2 update to 1.20.2
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-12-16 20:05:41 -05:00
Felix Kaechele
dc7e730037 fix installation of nginxmods.attr for EPEL 7
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-10-18 19:47:54 -04:00
Felix Kaechele
3ba5cb0faa Fix "file size changed while zipping" when rotating logs (rhbz#1980948,2015249,2015243)
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-10-18 18:55:11 -04:00
Sahana Prasad
0c7690e709 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:09:08 +02:00
Iveta Cesalova
447ae7f26a Adding tmt plan 2021-08-15 15:23:11 +00:00
Neal Gompa
f1c10bd5e4 Add -mod-devel subpackage for building external nginx modules (rhbz#1989778)
This change makes it possible to easily build third-party modules as RPMs
on top of the nginx package.

Per the constraints defined by NGINX upstream on binary compatibility for
external third-party modules, we include generators to add an ABI dependency
automatically.
2021-08-10 12:30:05 -04:00
Luboš Uhliarik
e4bc2afa65 Add symlink used by system-logos-httpd 2021-08-09 16:31:16 +02:00
Fedora Release Engineering
9b08ea197b - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 16:07:29 +00:00
Felix Kaechele
dc9dfb7a27 fix for CVE-2021-3618 (rhbz#1975651)
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-06-24 21:31:53 -04:00
Felix Kaechele
f0de5036a7 use different fix for rhbz#1683388 as it introduced permissions issues in 1:1.20.0-2
Signed-off-by: Felix Kaechele <heffer@fedoraproject.org>
2021-06-01 13:28:30 -04:00
Felix Kaechele
72036acd97 update to 1.20.1 (fixes CVE-2021-23017) 2021-05-25 12:11:40 -04:00