| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: nginx | Distribution: openSUSE Tumbleweed |
| Version: 1.29.8 | Vendor: openSUSE |
| Release: 1.1 | Build date: Tue Apr 7 16:28:15 2026 |
| Group: Productivity/Networking/Web/Proxy | Build host: reproducible |
| Size: 2678418 | Source RPM: nginx-1.29.8-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/nginx/nginx | |
| Summary: A HTTP server and IMAP/POP3 proxy server | |
nginx [engine x] is a HTTP server and IMAP/POP3 proxy server written by Igor Sysoev. It has been running on many heavily loaded Russian sites for more than two years.
BSD-2-Clause
* Tue Apr 07 2026 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.8
* https://nginx.org/en/CHANGES
* Added the "max_headers" directive.
* Added OpenSSL 4.0 compatibility.
* Added the "include" directive inside the "geo" block supports wildcards.
* Fixed in processing of HTTP 103 (Early Hints) responses from a proxied backend.
* Fixed the $request_port and $is_request_port variables were not available in subrequests.
* Thu Mar 26 2026 Marcus Rueckert <mrueckert@suse.de>
- Enabled support to build with aws-lc instead of openssl to ship
the http3/quic support
* Tue Mar 24 2026 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.7
* https://nginx.org/en/CHANGES
* Fixed a buffer overflow might occur while handling a COPY or MOVE
request in a location with "alias", allowing an attacker to modify
the source or destination path outside of the document root
(CVE-2026-27654) (boo#1260416).
* Fixed processing of a specially crafted mp4 file by the
ngx_http_mp4_module on 32-bit platforms might cause a worker process
crash, or might have potential other impact (CVE-2026-27784) (boo#1260417).
* Fixed processing of a specially crafted mp4 file by the
ngx_http_mp4_module might cause a worker process crash, or might have
potential other impact (CVE-2026-32647) (boo#1260420).
* Fixed a segmentation fault might occur in a worker process if the
CRAM-MD5 or APOP authentication methods were used and authentication
retry was enabled (CVE-2026-27651) (boo#1260415).
* Fixed an attacker might use PTR DNS records to inject data in
auth_http requests, as well as in the XCLIENT command in the backend
SMTP connection (CVE-2026-28753) (boo#1260418).
* Fixed SSL handshake might succeed despite OCSP rejecting a client
certificate in the stream module (CVE-2026-28755) (boo#1260419).
* Fixed an invalid HTTP/2 request might be sent after switching to the
next upstream if buffered body was used in the ngx_http_grpc_module.
* Changed now the "keepalive" directive in the "upstream" block is enabled by default.
* Changed now ngx_http_proxy_module supports keepalive by default; the
default value for "proxy_http_version" is "1.1"; the "Connection"
proxy header is not sent by default anymore.
* Added the "multipath" parameter of the "listen" directive.
* Added the "local" parameter of the "keepalive" directive in the "upstream" block.
* Tue Mar 10 2026 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.6
* https://nginx.org/en/CHANGES
* Added session affinity support; the "sticky" directive in the
"upstream" block of the "http" module; the "server" directive
supports the "route" and "drain" parameters.
* Changed now nginx limits the size and rate of QUIC stateless reset packets.
* Fixed receiving a QUIC packet by a wrong worker process could cause
the connection to terminate.
* Fixed "[crit] cache file ... contains invalid header" messages
might appear in logs when sending a cached HTTP/2 response.
* Fixed proxying to scgi backends might not work when using chunked
transfer encoding and the "scgi_request_buffering" directive.
* Fixed in the ngx_http_mp4_module.
* Fixed nginx treated a comma as separator in the "Cookie" request
header line when evaluating "$cookie_..." variables.
* Fixed in IMAP command literal argument parsing.
* Fri Feb 06 2026 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.5
* https://nginx.org/en/CHANGES
* Fixed an attacker might inject plain text data in the response from an SSL backend
(CVE-2026-1642) (boo#1257675).
* Fixed use-after-free might occur after switching to the next gRPC or HTTP/2 backend.
* Fixed an invalid HTTP/2 request might be sent after switching to the next upstream.
* Fixed a response with multiple ranges might be larger than the source response.
* Fixed setting HTTP_HOST when proxying to FastCGI, SCGI, and uwsgi backends.
* Fixed warning when compiling with MSVC 2022 x86.
* Changed the logging level of the "ech_required" SSL error has been lowered from "crit" to "info".
* Wed Dec 10 2025 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.4
* https://nginx.org/en/CHANGES
* Added the ngx_http_proxy_module supports HTTP/2.
* Added Encrypted ClientHello TLS extension support when using
OpenSSL ECH feature branch; the "ssl_ech_file" directive.
* Changed validation of host and port in the request line, "Host"
header field, and ":authority" pseudo-header field has been changed
to follow RFC 3986.
* Changed now a single LF used as a line terminator in a chunked
request or response body is considered an error.
* Fixed when using HTTP/3 with OpenSSL 3.5.1 or newer a segmentation
fault might occur in a worker process; the bug had appeared in 1.29.1.
* Fixed a segmentation fault might occur in a worker process if the
"try_files" directive and "proxy_pass" with a URI were used.
* Tue Oct 28 2025 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.3
* Changed nginx-conf.patch file.
* https://nginx.org/en/CHANGES
* Added the "add_header_inherit" and "add_trailer_inherit" directives.
* Added the $request_port and $is_request_port variables.
* Added the $ssl_sigalg and $ssl_client_sigalg variables.
* Added the "volatile" parameter of the "geo" directive.
* Added now certificate compression is available with BoringSSL.
* Fixed now certificate compression is disabled with OCSP stapling.
* Wed Oct 08 2025 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.2
* Changed nginx-conf.patch file.
* https://nginx.org/en/CHANGES
* Fixed now the "ssl_protocols" directive works in a virtual server
different from the default server when using OpenSSL 1.1.1 or newer.
* Fixed SSL handshake always failed when using TLSv1.3 with OpenSSL
and client certificates and resuming a session with a different SNI
value; the bug had appeared in 1.27.4.
* Fixed the "ignoring stale global SSL error" alerts might appear in
logs when using QUIC and the "ssl_reject_handshake" directive; the
bug had appeared in 1.29.0.
* Fixed in delta-seconds processing in the "Cache-Control" backend
response header line.
* Fixed an XCLIENT command didn't use the xtext encoding.
* Fixed in SSL certificate caching during reconfiguration.
* Thu Aug 14 2025 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.1
* https://nginx.org/en/CHANGES
* Fixed processing of a specially crafted login/password when using
the "none" authentication method in the ngx_mail_smtp_module might
cause worker process memory disclosure to the authentication server
(CVE-2025-53859) (boo#1248070).
* Changed TLSv1.3 certificate compression is disabled by default.
* Added the "ssl_certificate_compression" directive.
* Added support for 0-RTT in QUIC when using OpenSSL 3.5.1 or newer.
* Fixed the 103 response might be buffered when using HTTP/2 and the
"early_hints" directive.
* Fixed in handling "Host" and ":authority" header lines with equal
values when using HTTP/2; the bug had appeared in 1.17.9.
* Fixed in handling "Host" header lines with a port when using HTTP/3.
* Fixed in the "none" parameter of the "smtp_auth" directive.
* Wed Jul 16 2025 Илья Индиго <ilya@ilya.top>
- Changed nginx.logrotate and nginx-conf.patch files.
* Removed hardcoded user and group definitions.
- Removed ending slashes wherever possible.
* Wed Jul 16 2025 Parag Jain <parag.jain@suse.com>
- Removed root privileges when running logrotate (bsc#1246090).
* Fri Jun 27 2025 Илья Индиго <ilya@ilya.top>
- Updated to 1.29.0
* https://nginx.org/en/CHANGES
* Added support for response code 103 from proxy and gRPC backends;
the "early_hints" directive.
* Added loading of secret keys from hardware tokens with OpenSSL provider.
* Changed the logging level of SSL errors in a QUIC handshake has been
changed from "error" to "crit" for critical errors, and to "info" for
the rest; the logging level of unsupported QUIC transport parameters
has been lowered from "info" to "debug".
* Disabled OpenSSL 3.5 QUIC API support by default.
* Mon Jun 02 2025 Richard Rahl <rrahl0@opensuse.org>
- Updated to 1.28.0:
* Fixed -Wunterminated-string-initialization with gcc15
* HTTP/3: fixed NGX_HTTP_V3_VARLEN_INT_LEN value
* Thu May 22 2025 Oliver Kurz <okurz@suse.com>
- Changed service to prevent "timed out. Killing" messages on service stopping
* Wed Apr 16 2025 Илья Индиго <ilya@ilya.top>
- Updated to 1.27.5
* https://nginx.org/en/CHANGES
* Changed the maximum size limit for SSL sessions cached in shared
memory has been raised to 8192.
* Fixed in the "grpc_ssl_password_file", "proxy_ssl_password_file",
and "uwsgi_ssl_password_file" directives when loading SSL certificates
and encrypted keys from variables; the bug had appeared in 1.23.1.
* Fixed in the $ssl_curve and $ssl_curves variables when using pluggable
curves in OpenSSL.
* Thu Apr 03 2025 Marcus Rueckert <mrueckert@suse.de>
- Added nginx-man.patch to enable manpage 8 (boo#1240675).
* Sun Mar 30 2025 Илья Индиго <ilya@ilya.top>
- Removed rudiment /srv/www/htdocs/50x.html (boo#1240166).
- Changed nginx-conf.patch to refresh default config.
* Thu Feb 06 2025 Илья Индиго <ilya@ilya.top>
- Changed URL's from nginx.org to github.com .
- Updated to 1.27.4
* https://nginx.org/en/CHANGES
* Fixed insufficient check in virtual servers handling with TLSv1.3
SNI allowed to reuse SSL sessions in a different virtual server, to
bypass client SSL certificates verification (CVE-2025-23419) (boo#1236851).
* Added the "ssl_object_cache_inheritable", "ssl_certificate_cache",
"proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
"uwsgi_ssl_certificate_cache", "keepalive_min_timeout" directives.
* Fixed nginx could not build libatomic library using the library
sources if the --with-libatomic=DIR option was used.
* Wed Nov 27 2024 Илья Индиго <ilya@ilya.top>
- Updated to 1.27.3
* https://github.com/nginx/nginx/releases/tag/release-1.27.3
* Added the "server" directive in the "upstream" block supports the "resolve" parameter.
* Added the "resolver" and "resolver_timeout" directives in the "upstream" block.
* Added SmarterMail specific mode support for IMAP LOGIN with
untagged CAPABILITY response in the mail proxy module.
* Changed TLSv1 and TLSv1.1 protocols are disabled by default.
* Changed IPv6 address in square brackets and no port can be specified in the
"proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind",
and "uwsgi_bind" directives, and as client address in ngx_http_realip_module.
* Fixed ngx_http_mp4_module and "proxy_store" directive.
* Thu Oct 03 2024 Илья Индиго <ilya@ilya.top>
- Updated to 1.27.2
* https://nginx.org/en/CHANGES
* Added SSL certificates, secret keys, and CRLs are now cached on start
or during reconfiguration.
* Added client certificate validation with OCSP in the stream module.
* Added OCSP stapling support in the stream module.
* Added the "proxy_pass_trailers" directive in the ngx_http_proxy_module.
* Added the "ssl_client_certificate" directive now supports certificates
with auxiliary information.
* Changed now the "ssl_client_certificate" directive is not required
for client SSL certificates verification.
* Fri Sep 27 2024 Thorsten Kukuk <kukuk@suse.com>
- Add /srv/www to filelist [bsc#1231027]
* Fri Aug 16 2024 Илья Индиго <ilya@ilya.top>
- Renamed nginx-1.6.1-default_config.patch to nginx-conf.patch.
- Renamed nginx-1.2.4-perl_vendor_install.patch to nginx-perl.patch.
- Used atosetup -p1 macro and replaced editor from perl to sed.
- Added %check section with gpg signature source verification.
- Updated to 1.27.1
* https://nginx.org/en/CHANGES
* Fixed crash in ngx_http_mp4_module via specially crafted mp4 file
(CVE-2024-7347) (boo#1229155).
* Now the stream module handler is not mandatory.
* Fixed new HTTP/2 connections might ignore graceful shutdown of old worker processes.
* Fri May 31 2024 Илья Индиго <ilya@ilya.top>
- Updated to 1.27.0
* Changed nginx.keyring to Sergey Kandaurov’s PGP public key.
* https://nginx.org/en/CHANGES
* Added variables support in the "proxy_limit_rate", "fastcgi_limit_rate",
"scgi_limit_rate", and "uwsgi_limit_rate" directives.
* Fixed reduced memory consumption for long-lived requests if "gzip",
"gunzip", "ssi", "sub_filter", or "grpc_pass" directives are used.
* Fixed building with gcc 14 with --with-atomic option.
* Sat May 11 2024 Илья Индиго <ilya@ilya.top>
- Updated list of recommended modules (deleted unavailable in TW).
* Wed Apr 17 2024 Илья Индиго <ilya@ilya.top>
- Updated to 1.25.5
* Changed nginx.keyring to Roman Arutyunyan’s PGP public key.
* https://nginx.org/en/CHANGES
* Added virtual servers in the stream module.
* Fixed the ngx_stream_pass_module.
* Fixed the "deferred", "accept_filter", and "setfib" parameters
of the "listen" directive in the stream module.
* Added cache line size detection for some architectures.
* Tue Apr 16 2024 Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Set RuntimeDirectory to offer a location for Unix sockets at /run/nginx
* Sun Mar 03 2024 Adam Mizerski <adam@mizerski.pl>
- logrotate: don't fail if service not running
* Thu Feb 22 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Use %patch -P N instead of deprecated %patchN.
* Sun Feb 18 2024 Илья Индиго <ilya@ilya.top>
- Updated to 1.25.4
* Changed nginx.keyring to Sergey Kandaurov’s PGP public key.
* https://nginx.org/en/CHANGES
* Fixed segmentation fault might occur in a worker process while
processing a specially crafted QUIC session
(CVE-2024-24989 CVE-2024-24990) (boo#1219951 boo#1219952).
* Fixed connections with pending AIO operations might be closed
prematurely during graceful shutdown of old worker processes.
* Fixed socket leak alerts no longer logged when fast shutdown was
requested after graceful shutdown of old worker processes.
* Fixed socket descriptor error, a socket leak, or a segmentation fault
in a worker process might occur if AIO was used in a subrequest.
* Fixed segmentation fault might occur in a worker process if SSL
proxying was used along with the "image_filter" directive and errors
with code 415 were redirected with the "error_page" directive.
* Thu Oct 26 2023 Илья Индиго <ilya@ilya.top>
- Updated to 1.25.3
* https://nginx.org/en/CHANGES
* Changed: improved detection of misbehaving clients when using HTTP/2.
* Added: startup speedup when using a large number of locations.
* Fixed: a segmentation fault might occur in a worker process when
using HTTP/2 without SSL; the bug had appeared in 1.25.1.
* Fixed: the "Status" backend response header line with an empty
reason phrase was handled incorrectly.
* Fixed: memory leak during reconfiguration when using the PCRE2 library.
* Sun Aug 20 2023 Илья Индиго <ilya@ilya.top>
- Updated to 1.25.2
* https://nginx.org/en/CHANGES
* Changed: uses appname "nginx" when loading OpenSSL configuration.
* Changed: does not try to load OpenSSL configuration if the
- -with-openssl option was used to built OpenSSL and the OPENSSL_CONF
environment variable is not set.
* Wed Jun 14 2023 Илья Индиго <ilya@ilya.top>
- Updated to 1.25.1
* https://nginx.org/en/CHANGES
* Added "http2" directive, which enables HTTP/2 on a per-server basis.
* Deprecated "http2" parameter of the "listen" directive.
* Removed HTTP/2 server push support.
* Deprecated "ssl" directive is not supported anymore.
* Tue May 23 2023 Илья Индиго <ilya@ilya.top>
- Updated to 1.25.0
* https://nginx.org/en/CHANGES
* Added experimental HTTP/3 support.
* Wed Mar 29 2023 Илья Индиго <ilya@ilya.top>
- Updated to 1.23.4
* https://nginx.org/en/CHANGES
* Enabled TLSv1.3 protocol by default.
* Supported byte ranges support in the ngx_http_gzip_static_module.
* Fixed port ranges in the "listen" directive did not work.
* Fixed incorrect location might be chosen to process a request if a
prefix location longer than 255 characters.
* Fixed a socket leak might occur when using HTTP/2 and the
"error_page" directive to redirect errors with code 400.
/etc/logrotate.d/nginx /etc/nginx /etc/nginx/conf.d /etc/nginx/fastcgi.conf /etc/nginx/fastcgi.conf.default /etc/nginx/fastcgi_params /etc/nginx/fastcgi_params.default /etc/nginx/koi-utf /etc/nginx/koi-win /etc/nginx/mime.types /etc/nginx/mime.types.default /etc/nginx/nginx.conf /etc/nginx/nginx.conf.default /etc/nginx/scgi_params /etc/nginx/scgi_params.default /etc/nginx/uwsgi_params /etc/nginx/uwsgi_params.default /etc/nginx/vhosts.d /etc/nginx/win-utf /srv/www /srv/www/htdocs /usr/lib/perl5/vendor_perl/5.42.0/x86_64-linux-thread-multi/auto/nginx /usr/lib/perl5/vendor_perl/5.42.0/x86_64-linux-thread-multi/auto/nginx/nginx.so /usr/lib/perl5/vendor_perl/5.42.0/x86_64-linux-thread-multi/nginx.pm /usr/lib/systemd/system/nginx.service /usr/lib/sysusers.d/nginx.conf /usr/lib64/nginx /usr/lib64/nginx/modules /usr/lib64/nginx/modules/ngx_http_image_filter_module.so /usr/lib64/nginx/modules/ngx_http_perl_module.so /usr/lib64/nginx/modules/ngx_http_xslt_filter_module.so /usr/lib64/nginx/modules/ngx_mail_module.so /usr/lib64/nginx/modules/ngx_stream_module.so /usr/sbin/nginx /usr/share/doc/packages/nginx /usr/share/doc/packages/nginx/CHANGES /usr/share/doc/packages/nginx/CHANGES.ru /usr/share/doc/packages/nginx/LICENSE /usr/share/man/man3/nginx.3pm.gz /usr/share/man/man8/nginx.8.gz /usr/share/nginx /usr/share/nginx/geo2nginx.pl /usr/share/nginx/unicode2nginx /usr/share/nginx/unicode2nginx/koi-utf /usr/share/nginx/unicode2nginx/unicode-to-nginx.pl /usr/share/nginx/unicode2nginx/win-utf /var/lib/nginx /var/lib/nginx/fastcgi /var/lib/nginx/proxy /var/lib/nginx/scgi /var/lib/nginx/tmp /var/lib/nginx/uwsgi /var/log/nginx
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Jul 24 15:27:28 2026