Change logs for nginx source package in Lunar

  • nginx (1.22.0-1ubuntu3) lunar; urgency=medium
    
      * SECURITY UPDATE: memory corruption/disclosure issue
        - debian/patches/CVE-2022-41741_41742.patch: disabled duplicate atoms in
          Mp4
        - CVE-2022-41741
        - CVE-2022-41742
    
     -- Nishit Majithia <email address hidden>  Tue, 21 Feb 2023 18:35:20 +0530
  • nginx (1.22.0-1ubuntu2) lunar; urgency=medium
    
      * Rebuild against new perlapi-5.36.
    
     -- Gianfranco Costamagna <email address hidden>  Fri, 04 Nov 2022 16:49:47 +0100
  • nginx (1.22.0-1ubuntu1) kinetic; urgency=medium
    
      * Merge with Debian unstable (LP: #1982626). Remaining changes:
        - d/p/ubuntu-branding.patch: add Ubuntu branding
        - d/apport/source_nginx.py: Add apport hooks for additional bug
          information gathering.
        - d/nginx-common.install: Add install rule for apport hooks.
        - d/p/nginx-fix-pidfile.patch: Fix NGINX PIDfile handling to avoid
          SystemD race condition - thanks to Tj for the patch.  (LP #1581864)
        - d/control: make nginx and nginx-full arch any, so that nginx-full
          is no longer pulled into main because of i386 (LP #1893267)
        - Remove the Lua modules from NGINX (Server Team Decision) - future support
          for Lua module now requires resty-core from OpenResty, meaning that if
          we want to continue to support the Lua module, we have to start becoming
          OpenResty - users should just use OpenResty at this point for Lua.
          Changes made for this removal:
           + d/control:
             + Remove lua module from dependencies, and binary build item.
             + Add "Breaks" line for nginx-lua for older versions of NGINX.
               This is added to the nginx metapackage and nginx-extras.
           + d/rules: Remove Lua module from the build flags for -extras.
           + d/http-lua, d/modules/{,patches/,watch/}nginx-lua: Remove Lua
             modules, watch file, module patches.
           + d/modules/control: Remove Lua module from definitions
           + d/copyright: Remove lua module.
           + d/tests/{control,lua/}: Remove Lua test entirely, remove
             dependencies on any test which request
             libnginx-mod-http-lua as it's gone.
        - d/control: drop GeoIP from nginx-core due to demotion of libgeoip
          (LP #1861101, LP #1867150):
          + remove libnginx-mod-http-geoip from nginx-core dependency
          + have nginx-core depend on libnginx-mod-stream-geoip2
            instead of libnginx-mod-stream-geoip
          + adjust package descriptions accordingly
        - d/control: (GeoIP2 related changes)
          + Update dependencies for http-geoip2 package to include libmaxminddb0.
          + Update nginx-core to include http-geoip2 module due to approved bin-MIR
            (LP #1867198)
          + Move geoip2 module build flags to the common flags so all
            package flavors have it.
          + Update dependencies for nginx-light, etc. to include
            libnginx-mod-http-geoip2 as it's in the 'common build flags'
            for all flavors of the builds.
          + Update package description for nginx-core to indicate geoip2
            is included, and to list third party HTTP modules.  GeoIP2
            is not included for Stream by default, so we have to adjust
            this because the Stream part isn't MIR'd.
      * d/p/ubuntu-branding.patch: Reimplement patch to avoid conflicting on
        (volatile) release version numbers when merging.
      * d/m/p/http-subs-filter/pcre2.patch: Patch from debian 0d813834 to
        fix FTBFS
      * d/t/branding: Add autopkgtest to validate branding presence
    
     -- Bryce Harrington <email address hidden>  Fri, 22 Jul 2022 17:56:50 -0700