Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gates/nginx 1.21.0 buster #1

Draft
wants to merge 59 commits into
base: kadoka-buster
Choose a base branch
from
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
59 commits
Select commit Hold shift + click to select a range
e3f6ed2
Add missing changelog entries
ctrochalakis Dec 27, 2018
ccedd11
gbp: setup for buster
ctrochalakis Aug 13, 2019
fce697b
Handle CVE-2019-9511 CVE-2019-9513 CVE-2019-9516
ctrochalakis Aug 19, 2019
117fc21
Release 1.14.2-2+deb10u1
ctrochalakis Aug 19, 2019
06b6f56
Handle CVE-2019-20372, error page request smuggling
ctrochalakis Jan 11, 2020
f6841c9
Release 1.16.1-3
ctrochalakis Jan 11, 2020
55ef39e
Enable --with-compat configure option
mohd-akram May 11, 2020
e5f8119
Add REMOTE_USER fastcgi param
onovy May 28, 2020
b58e974
Merge branch 'with-compat' into 'master'
onovy May 28, 2020
3ef09c0
Use debhelper-compat instead of debian/compat
onovy May 28, 2020
2b4e972
Replace dh_systemd_enable with dh_installsystemd
onovy May 28, 2020
12e9c91
Set Rules-Requires-Root: no
onovy May 28, 2020
7f0bb45
d/rules/dh_installinit: Replace --no-restart-on-upgrade with --no-sto…
onovy May 28, 2020
52a04bd
Bump debhelper compat level to 13
onovy May 28, 2020
d089e10
Use package.maintscript instead of dpkg-maintscript-helper
onovy May 28, 2020
403f780
Bump standards version to 4.5.0
onovy May 28, 2020
b575cfe
nchan: Upgrade to 1.2.7
onovy May 28, 2020
f33d2ab
d/watch: Change to 1.18.x
onovy May 28, 2020
b283023
New upstream version 1.18.0
onovy May 28, 2020
13ba480
Update upstream source from tag 'upstream/1.18.0'
onovy May 28, 2020
f1ae990
d/patches/CVE-2019-20372.patch: Rebase
onovy May 28, 2020
3c7832e
New upstream version.
onovy May 28, 2020
6ac8972
Convert d/ngxmod to Python 3 (Closes: #953025)
onovy May 28, 2020
bc6e1b3
nchan: Upgrade to 1.2.7
onovy May 28, 2020
5e6d8fe
http-fancyindex: Upgrade to 0.4.4
onovy May 28, 2020
dd794d9
Enable CI
onovy May 29, 2020
ead863a
d/copyright: Add myself for Debian part
onovy May 29, 2020
8838bdc
Add myself as uploader
onovy May 29, 2020
693c482
releasing package nginx version 1.18.0-1
onovy May 29, 2020
134d203
d/conf/sites-available/default: Update PHP path for PHP 7.4
onovy Jun 4, 2020
c6872b4
d/conf/nginx.conf: Enable TLSv1.3
onovy Jun 4, 2020
4851b6e
http-geoip2: Add ngx_http_geoip2_module 3.3
oerdnj Jan 4, 2019
e3540f5
d/copyright: Update for release
onovy Jun 4, 2020
1459087
d/conf/nginx.conf: Remove tcp_nodelay on, which is same as default
onovy Jun 4, 2020
9fbad86
d/conf/nginx.conf: Remove keepalive_timeout 65 and use default value …
onovy Jun 4, 2020
478b737
d/conf/nginx.conf: Remove trailing whitespaces
onovy Jun 4, 2020
3edca84
Build dynamic modules only in extras flavour
onovy Jun 4, 2020
a2ddfe2
d/ngx-conf: Convert to Python 3
onovy Jun 4, 2020
a681a84
d/control: Add GeoIP2 into description
onovy Jun 4, 2020
b39ced7
d/copyright: Fix wrong filename
onovy Jun 4, 2020
6982ab3
Introduce nginx-core and make it new default for "nginx"
onovy Jun 4, 2020
8dfca73
libnginx-mod-* now depends on nginx-<any flavour>
onovy Jun 4, 2020
6930b5a
Add stream-geoip and stream-geoip2 modules
onovy Jun 4, 2020
d9b51eb
d/copyright: Add Thomas Ward from Ubuntu
onovy Jun 5, 2020
cc65b80
Check if port 80 is free before starting during install
onovy Jun 5, 2020
886b036
releasing package nginx version 1.18.0-2
onovy Jun 5, 2020
fd2d73b
Source-only upload to allow migration.
onovy Jun 11, 2020
f039c69
releasing package nginx version 1.18.0-3
onovy Jun 11, 2020
b760bb0
Update ngx_http_auth_pam_module upstream URL
onovy Jun 24, 2020
704b0f0
http-auth-pam: Upgrade to 1.5.2 (Closes: #963567)
onovy Jun 24, 2020
d08f168
d/copyright: Bump year of http-auth-pam
onovy Jun 24, 2020
7df3da6
Revert: libnginx-mod-* now depends on nginx-<any flavour> (Closes: 96…
onovy Jun 30, 2020
bfdc885
releasing package nginx version 1.18.0-4
onovy Jul 3, 2020
aa1f93e
Prevented request smuggling in LUA CVE-2020-11724 Closes: #964950
onovy Jul 14, 2020
0c7efef
releasing package nginx version 1.18.0-5
onovy Jul 14, 2020
63fd05c
update nginx to latetst (at time) 1.21.0
Jun 24, 2021
9d3c845
Merge remote-tracking branch 'upstream/buster' into gates/nginx-1.21.…
Jun 24, 2021
ce1da83
something changed
Jun 25, 2021
ddc654a
=merge 1.18.0-5 package
Jun 28, 2021
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
437 changes: 434 additions & 3 deletions CHANGES

Large diffs are not rendered by default.

520 changes: 517 additions & 3 deletions CHANGES.ru

Large diffs are not rendered by default.

5 changes: 5 additions & 0 deletions LICENSE
Original file line number Diff line number Diff line change
@@ -1,6 +1,11 @@
/*
<<<<<<< HEAD
* Copyright (C) 2002-2021 Igor Sysoev
* Copyright (C) 2011-2021 Nginx, Inc.
=======
* Copyright (C) 2002-2019 Igor Sysoev
* Copyright (C) 2011-2019 Nginx, Inc.
>>>>>>> debian/1.18.0-5
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
Expand Down
2 changes: 2 additions & 0 deletions auto/init
Original file line number Diff line number Diff line change
Expand Up @@ -48,4 +48,6 @@ default: build

clean:
rm -rf Makefile $NGX_OBJS

.PHONY: default clean
END
2 changes: 2 additions & 0 deletions auto/install
Original file line number Diff line number Diff line change
Expand Up @@ -215,4 +215,6 @@ upgrade:
test -f $NGX_PID_PATH.oldbin

kill -QUIT \`cat $NGX_PID_PATH.oldbin\`

.PHONY: build install modules upgrade
END
13 changes: 7 additions & 6 deletions auto/make
Original file line number Diff line number Diff line change
Expand Up @@ -313,7 +313,7 @@ $ngx_obj: \$(CORE_DEPS) \$(HTTP_DEPS)$ngx_cont$ngx_src
END

fi
done
done

fi

Expand Down Expand Up @@ -343,7 +343,7 @@ $ngx_obj: \$(CORE_DEPS) \$(MAIL_DEPS)$ngx_cont$ngx_src
$ngx_cc$ngx_tab$ngx_objout$ngx_obj$ngx_tab$ngx_src$NGX_AUX

END
done
done

fi

Expand Down Expand Up @@ -373,7 +373,7 @@ $ngx_obj: \$(CORE_DEPS) \$(STREAM_DEPS)$ngx_cont$ngx_src
$ngx_cc$ngx_tab$ngx_objout$ngx_obj$ngx_tab$ngx_src$NGX_AUX

END
done
done

fi

Expand All @@ -399,7 +399,7 @@ $ngx_obj: \$(CORE_DEPS) $ngx_cont$ngx_src
$ngx_cc$ngx_tab$ngx_objout$ngx_obj$ngx_tab$ngx_src$NGX_AUX

END
done
done

fi

Expand Down Expand Up @@ -431,7 +431,7 @@ $ngx_obj: \$(ADDON_DEPS)$ngx_cont$ngx_src
$ngx_cc$ngx_tab$ngx_objout$ngx_obj$ngx_tab$ngx_src$NGX_AUX

END
done
done

fi

Expand Down Expand Up @@ -502,6 +502,7 @@ fi
for ngx_module in $DYNAMIC_MODULES
do
eval ngx_module_srcs="\$${ngx_module}_SRCS"
eval ngx_module_shrd="\$${ngx_module}_SHRD"
eval eval ngx_module_libs="\\\"\$${ngx_module}_LIBS\\\""

eval ngx_module_modules="\$${ngx_module}_MODULES"
Expand Down Expand Up @@ -567,7 +568,7 @@ END
| sed -e "s/\(.*\.\)c/\1$ngx_objext/"`

ngx_module_objs=
for ngx_src in $ngx_module_srcs
for ngx_src in $ngx_module_srcs $ngx_module_shrd
do
case "$ngx_src" in
src/*)
Expand Down
44 changes: 42 additions & 2 deletions auto/module
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,6 @@ if [ "$ngx_module_link" = DYNAMIC ]; then
done

DYNAMIC_MODULES="$DYNAMIC_MODULES $ngx_module"
eval ${ngx_module}_SRCS=\"$ngx_module_srcs\"

eval ${ngx_module}_MODULES=\"$ngx_module_name\"

Expand All @@ -31,6 +30,30 @@ if [ "$ngx_module_link" = DYNAMIC ]; then
eval ${ngx_module}_ORDER=\"$ngx_module_order\"
fi

srcs=
shrd=
for src in $ngx_module_srcs
do
found=no
for old in $DYNAMIC_MODULES_SRCS
do
if [ $src = $old ]; then
found=yes
break
fi
done

if [ $found = no ]; then
srcs="$srcs $src"
else
shrd="$shrd $src"
fi
done
eval ${ngx_module}_SRCS=\"$srcs\"
eval ${ngx_module}_SHRD=\"$shrd\"

DYNAMIC_MODULES_SRCS="$DYNAMIC_MODULES_SRCS $srcs"

if test -n "$ngx_module_incs"; then
CORE_INCS="$CORE_INCS $ngx_module_incs"
fi
Expand Down Expand Up @@ -107,7 +130,24 @@ elif [ "$ngx_module_link" = ADDON ]; then
eval ${ngx_module_type}_MODULES=\"\$${ngx_module_type}_MODULES \
$ngx_module_name\"

NGX_ADDON_SRCS="$NGX_ADDON_SRCS $ngx_module_srcs"
srcs=
for src in $ngx_module_srcs
do
found=no
for old in $NGX_ADDON_SRCS
do
if [ $src = $old ]; then
found=yes
break
fi
done

if [ $found = no ]; then
srcs="$srcs $src"
fi
done

NGX_ADDON_SRCS="$NGX_ADDON_SRCS $srcs"

if test -n "$ngx_module_incs"; then
eval ${ngx_var}_INCS=\"\$${ngx_var}_INCS $ngx_module_incs\"
Expand Down
35 changes: 18 additions & 17 deletions auto/modules
Original file line number Diff line number Diff line change
Expand Up @@ -102,21 +102,6 @@ if [ $HTTP = YES ]; then
fi


if [ $HTTP_SSI = YES ]; then
HTTP_POSTPONE=YES
fi


if [ $HTTP_SLICE = YES ]; then
HTTP_POSTPONE=YES
fi


if [ $HTTP_ADDITION = YES ]; then
HTTP_POSTPONE=YES
fi


# the module order is important
# ngx_http_static_module
# ngx_http_gzip_static_module
Expand Down Expand Up @@ -252,13 +237,13 @@ if [ $HTTP = YES ]; then
. auto/module
fi

if [ $HTTP_POSTPONE = YES ]; then
if :; then
ngx_module_name=ngx_http_postpone_filter_module
ngx_module_incs=
ngx_module_deps=
ngx_module_srcs=src/http/ngx_http_postpone_filter_module.c
ngx_module_libs=
ngx_module_link=$HTTP_POSTPONE
ngx_module_link=YES

. auto/module
fi
Expand Down Expand Up @@ -1000,6 +985,12 @@ if [ $MAIL != NO ]; then
ngx_module_srcs=src/mail/ngx_mail_proxy_module.c

. auto/module

ngx_module_name=ngx_mail_realip_module
ngx_module_deps=
ngx_module_srcs=src/mail/ngx_mail_realip_module.c

. auto/module
fi


Expand Down Expand Up @@ -1134,6 +1125,16 @@ if [ $STREAM != NO ]; then
. auto/module
fi

if [ $STREAM_SET = YES ]; then
ngx_module_name=ngx_stream_set_module
ngx_module_deps=
ngx_module_srcs=src/stream/ngx_stream_set_module.c
ngx_module_libs=
ngx_module_link=$STREAM_SET

. auto/module
fi

if [ $STREAM_UPSTREAM_HASH = YES ]; then
ngx_module_name=ngx_stream_upstream_hash_module
ngx_module_deps=
Expand Down
6 changes: 5 additions & 1 deletion auto/options
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,6 @@ HTTP_GZIP=YES
HTTP_SSL=NO
HTTP_V2=NO
HTTP_SSI=YES
HTTP_POSTPONE=NO
HTTP_REALIP=NO
HTTP_XSLT=NO
HTTP_IMAGE_FILTER=NO
Expand Down Expand Up @@ -125,15 +124,18 @@ STREAM_GEOIP=NO
STREAM_MAP=YES
STREAM_SPLIT_CLIENTS=YES
STREAM_RETURN=YES
STREAM_SET=YES
STREAM_UPSTREAM_HASH=YES
STREAM_UPSTREAM_LEAST_CONN=YES
STREAM_UPSTREAM_RANDOM=YES
STREAM_UPSTREAM_ZONE=YES
STREAM_SSL_PREREAD=NO

DYNAMIC_MODULES=
DYNAMIC_MODULES_SRCS=

NGX_ADDONS=
NGX_ADDON_SRCS=
NGX_ADDON_DEPS=
DYNAMIC_ADDONS=

Expand Down Expand Up @@ -325,6 +327,7 @@ use the \"--with-mail_ssl_module\" option instead"
--without-stream_split_clients_module)
STREAM_SPLIT_CLIENTS=NO ;;
--without-stream_return_module) STREAM_RETURN=NO ;;
--without-stream_set_module) STREAM_SET=NO ;;
--without-stream_upstream_hash_module)
STREAM_UPSTREAM_HASH=NO ;;
--without-stream_upstream_least_conn_module)
Expand Down Expand Up @@ -539,6 +542,7 @@ cat << END
--without-stream_split_clients_module
disable ngx_stream_split_clients_module
--without-stream_return_module disable ngx_stream_return_module
--without-stream_set_module disable ngx_stream_set_module
--without-stream_upstream_hash_module
disable ngx_stream_upstream_hash_module
--without-stream_upstream_least_conn_module
Expand Down
25 changes: 25 additions & 0 deletions auto/os/linux
Original file line number Diff line number Diff line change
Expand Up @@ -86,6 +86,31 @@ if [ $ngx_found = yes ]; then
ee.data.ptr = NULL;
epoll_ctl(efd, EPOLL_CTL_ADD, fd, &ee)"
. auto/feature


# eventfd()

ngx_feature="eventfd()"
ngx_feature_name="NGX_HAVE_EVENTFD"
ngx_feature_run=no
ngx_feature_incs="#include <sys/eventfd.h>"
ngx_feature_path=
ngx_feature_libs=
ngx_feature_test="(void) eventfd(0, 0)"
. auto/feature

if [ $ngx_found = yes ]; then
have=NGX_HAVE_SYS_EVENTFD_H . auto/have
fi


if [ $ngx_found = no ]; then

ngx_feature="eventfd() (SYS_eventfd)"
ngx_feature_incs="#include <sys/syscall.h>"
ngx_feature_test="(void) SYS_eventfd"
. auto/feature
fi
fi


Expand Down
Loading