-
nginx (1.24.0-1ubuntu1) mantic; urgency=low
* Merge with Debian unstable. Remaining changes:
- Branding for Ubuntu
+ d/p/ubuntu-branding.patch: add Ubuntu branding
+ d/t/branding: Add autopkgtest to validate branding presence
- d/control: Drop the Lua module (libnginx-mod-http-lua) as a
dependency for NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
- d/control: let nginx-core depend on geoip2 instead of geoip.
- d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too
-- Gianfranco Costamagna <email address hidden> Wed, 28 Jun 2023 08:48:23 +0200
-
nginx (1.22.1-9ubuntu5) mantic; urgency=medium
* Merge with Debian unstable (LP: #1993421). Remaining changes:
- Branding for Ubuntu
+ d/p/ubuntu-branding.patch: add Ubuntu branding
+ d/t/branding: Add autopkgtest to validate branding presence
- d/control: Drop the Lua module (libnginx-mod-http-lua) as a
dependency for NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
- d/control: let nginx-core depend on geoip2 instead of geoip.
- d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too
-- Gianfranco Costamagna <email address hidden> Sat, 20 May 2023 11:45:20 +0200
-
nginx (1.22.1-9ubuntu4) mantic; urgency=medium
* Merge with Debian unstable (LP: #1993421). Remaining changes:
- Branding for Ubuntu
+ d/p/ubuntu-branding.patch: add Ubuntu branding
+ d/t/branding: Add autopkgtest to validate branding presence
- d/control: Drop the Lua module (libnginx-mod-http-lua) as a
dependency for NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
- d/control: let nginx-core depend on geoip2 instead of geoip.
- d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too
-- Gianfranco Costamagna <email address hidden> Sat, 20 May 2023 11:45:20 +0200
-
nginx (1.22.1-9ubuntu3) mantic; urgency=medium
* Merge with Debian unstable (LP: #1993421). Remaining changes:
- Branding for Ubuntu
+ d/p/ubuntu-branding.patch: add Ubuntu branding
+ d/t/branding: Add autopkgtest to validate branding presence
- d/control: Drop the Lua module (libnginx-mod-http-lua) as a
dependency for NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
- d/control: let nginx-core depend on geoip2 instead of geoip.
- d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too
-- Gianfranco Costamagna <email address hidden> Sat, 20 May 2023 11:45:20 +0200
-
nginx (1.22.1-9ubuntu2) mantic; urgency=medium
* Merge with Debian unstable (LP: #1993421). Remaining changes:
- Branding for Ubuntu
+ d/p/ubuntu-branding.patch: add Ubuntu branding
+ d/t/branding: Add autopkgtest to validate branding presence
- d/control: Drop the Lua module (libnginx-mod-http-lua) as a
dependency for NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
- d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too
-- Gianfranco Costamagna <email address hidden> Sat, 20 May 2023 11:45:20 +0200
-
nginx (1.22.1-9ubuntu1) mantic; urgency=medium
* Merge with Debian unstable (LP: #1993421). Remaining changes:
- Branding for Ubuntu
+ d/p/ubuntu-branding.patch: add Ubuntu branding
+ d/t/branding: Add autopkgtest to validate branding presence
- d/control: Drop the Lua module (libnginx-mod-http-lua) as a
dependency for NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
- d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too
nginx (1.22.1-9) unstable; urgency=medium
* d/control: nginx-common Breaks+Replaces: nginx (<< 1.22.1-8)
(Closes: 1032929)
nginx (1.22.1-8) unstable; urgency=medium
* Main change:
Configuration files returned to nginx-common package. This fixes
the serious problem of losing configuration files during upgrade.
This is a rollback of a change made in 1.22.1-6 (Closes: 1032517)
* d/control: fix nginx-full dependencies
* d/libnginx-mod.abisubstvars: update libnginx-mod-http-lua version
-- Gianfranco Costamagna <email address hidden> Sat, 20 May 2023 11:45:20 +0200
-
nginx (1.22.1-7ubuntu1) mantic; urgency=medium
* Merge with Debian unstable (LP: #1993421). Remaining changes:
- Branding for Ubuntu
+ d/p/ubuntu-branding.patch: add Ubuntu branding
+ d/t/branding: Add autopkgtest to validate branding presence
- d/control: Drop the Lua module (libnginx-mod-http-lua) as a
dependency for NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
* Dropped:
- d/apport/source_nginx.py: Add apport hooks for additional bug
information gathering.
[Accepted by Debian 1.22.0-2. Deb #963668]
- d/nginx-common.install: Add install rule for apport hooks.
[Accepted by Debian in 1.22.0-2. Deb #963668]
- d/p/nginx-fix-pidfile.patch: Fix NGINX PIDfile handling to avoid
SystemD race condition - thanks to Tj for the patch. (LP #1581864)
[Accepted by Debian 1.22.0-2. Deb #876365]
- d/control: make nginx and nginx-full arch any, so that nginx-full
is no longer pulled into main because of i386 (LP #1893267)
[No longer required due to Debian packaging split]
- Remove the Lua modules from NGINX (Server Team Decision) - future support
for Lua module now requires resty-core from OpenResty, meaning that if
we want to continue to support the Lua module, we have to start becoming
OpenResty - users should just use OpenResty at this point for Lua.
Changes made for this removal:
+ d/control:
+ Remove lua module from dependencies, and binary build item.
+ Add "Breaks" line for nginx-lua for older versions of NGINX.
This is added to the nginx metapackage and nginx-extras.
+ d/rules: Remove Lua module from the build flags for -extras.
+ d/http-lua, d/modules/{,patches/,watch/}nginx-lua: Remove Lua
modules, watch file, module patches.
+ d/modules/control: Remove Lua module from definitions
+ d/copyright: Remove lua module.
+ d/tests/{control,lua/}: Remove Lua test entirely, remove
dependencies on any test which request
libnginx-mod-http-lua as it's gone.
[No longer required due to Debian packaging split]
- d/control: drop GeoIP from nginx-core due to demotion of libgeoip
(LP #1861101, LP #1867150):
+ remove libnginx-mod-http-geoip from nginx-core dependency
+ have nginx-core depend on libnginx-mod-stream-geoip2
instead of libnginx-mod-stream-geoip
+ adjust package descriptions accordingly
[No longer required due to Debian packaging split]
- d/control: (GeoIP2 related changes)
+ Update dependencies for http-geoip2 package to include libmaxminddb0.
+ Update nginx-core to include http-geoip2 module due to approved bin-MIR
(LP #1867198)
+ Move geoip2 module build flags to the common flags so all
package flavors have it.
+ Update dependencies for nginx-light, etc. to include
libnginx-mod-http-geoip2 as it's in the 'common build flags'
for all flavors of the builds.
+ Update package description for nginx-core to indicate geoip2
is included, and to list third party HTTP modules. GeoIP2
is not included for Stream by default, so we have to adjust
this because the Stream part isn't MIR'd.
[No longer required due to Debian packaging split]
- d/m/p/http-subs-filter/pcre2.patch: Patch from debian 0d813834 to
fix FTBFS
[Debian switched to libpcre2 in 1.22.1-7]
- d/p/CVE-2022-41741_41742.patch: disabled duplicate atoms in Mp4
(CVE-2022-41741, CVE-2022-41742)
[Included in upstream 1.22.1 release]
-- Bryce Harrington <email address hidden> Thu, 23 Feb 2023 01:22:32 -0800
-
nginx (1.22.0-1ubuntu3) lunar; urgency=medium
* SECURITY UPDATE: memory corruption/disclosure issue
- debian/patches/CVE-2022-41741_41742.patch: disabled duplicate atoms in
Mp4
- CVE-2022-41741
- CVE-2022-41742
-- Nishit Majithia <email address hidden> Tue, 21 Feb 2023 18:35:20 +0530
