Comment 10 for bug 1861101

Revision history for this message
Thomas Ward (teward) wrote :

NACK on nginx until Security Team reviews.

Details in IRC, but long story short is libnginx-mod-http-geoip2 is NOT part of the nginx core code that is shipped from upstream (whereas libnginx-mod-http-geoip *is* built from upstream code and they have no intention to update it to geoip2 at the moment), and as such the libnginx-mod-http2-geoip2 code needs a Security Team review for MIR inclusion.