linux/meta-openembedded.git/meta-webserver/recipes-httpd/nginx/files, branch master

nginx: upgrade 1.28.0 -> 1.28.1

2026-01-04T19:06:41+00:00

Drop CVE patch which has been integrated into this new version. Solves: * CVE-2025-53859 CHANGES: https://nginx.org/en/CHANGES-1.28 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj

nginx: patch CVE-2025-53859 in stable

2025-08-26T03:07:19+00:00

Pick patch from nginx site which is also mentioned in [1]. [1] https://security-tracker.debian.org/tracker/CVE-2025-53859 Signed-off-by: Peter Marko Signed-off-by: Khem Raj

nginx: Upgrade stable 1.24.0 -> 1.26.0

2024-05-01T00:02:36+00:00

nginx-1.26.0 stable version has been released, incorporating new features and bug fixes from the 1.25.x mainline branch - including experimental HTTP/3 support, HTTP/2 on a per-server basis virtual servers in the stream module, passing stream connections to listen sockets, and more. License-Update: copyright years refreshed Signed-off-by: Peter Marko Signed-off-by: Khem Raj

nginx: fix CVE-2023-44487

2024-01-11T20:11:36+00:00

Upstream-Status: Backport from [https://github.com/nginx/nginx/commit/6ceef192e7af1c507826ac38a2d43f08bf265fb9] WARNING: nginx-1.24.0-r0 do_cve_check: Found unpatched CVE (CVE-2023-44487) This vulnerability exists between the following versions -> From(including) 1.9.5 Up to(including) 1.25.2 Signed-off-by: alperak Signed-off-by: Khem Raj

nginx: add configure option

2023-10-04T20:10:06+00:00

Support --with-http_xslt_module configure option via a PACKAGECONFIG option. The option is not added to the defaults. Signed-off-by: Joe Slater Signed-off-by: Khem Raj

nginx: upgrade 1.20.1 -> 1.23.3

2023-03-10T07:45:17+00:00

CVE-2021-3618.patch removed since it's included in 1.23.3 Changelog: ========== *) Bugfix: an error might occur when reading PROXY protocol version 2 header with large number of TLVs. *) Bugfix: a segmentation fault might occur in a worker process if SSI was used to process subrequests created by other modules. Thanks to Ciel Zhao. *) Workaround: when a hostname used in the "listen" directive resolves to multiple addresses, nginx now ignores duplicates within these addresses. *) Bugfix: nginx might hog CPU during unbuffered proxying if SSL connections to backends were used. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

nginx: fix CVE-2021-3618

2021-08-20T16:26:18+00:00

Backport with no change a patch from version 1.21.0. This patch was not cherry-picked by nginx to version 1.20.1. Information about this CVE comes from https://ubuntu.com/security/CVE-2021-3618. Signed-off-by: Joe Slater Signed-off-by: Khem Raj

nginx: fix error during service startup

2020-02-26T15:17:58+00:00

fix below error: nginx.service: failed to parse pid from file /run/nginx/nginx.pid: invalid argument Signed-off-by: Changqing Li Signed-off-by: Khem Raj

nginx: fix kill path in nginx systemd unit file

2019-05-27T16:48:07+00:00

the kill utility is located in /bin/kill -> use base_bindir instead of bindir Signed-off-by: Nicola Lunghi Signed-off-by: Khem Raj

nginx: add default proxy_params

2019-01-19T18:06:20+00:00

As per Debian packaging - to use it, see https://wiki.debian.org/Nginx/DirectoryStructure#Extra_Parameters This file is most commonly included when Nginx is acting as a reverse proxy: include /etc/nginx/proxy_params; proxy_pass http://localhost:8000; Signed-off-by: André Draszik Signed-off-by: Khem Raj