Commit Graph

23 Commits

Author SHA1 Message Date
Cameron E Baird 9be1704f23 nginx: Address CVE-2024-7347 (#10190) 2024-08-29 12:55:36 -04:00
Pawel Winogrodzki 01547eeed5
Fixed CVE-2023-44487 in `nginx` and `golang` (CP of #6381) (#6395)
* Fixed CVE-2023-44487 in `nginx` and `golang` (#6381)

Co-authored-by: Dan Streetman <ddstreet@ieee.org>
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>

* Bumping 'kubernetes'.

---------

Co-authored-by: Dan Streetman <ddstreet@microsoft.com>
Co-authored-by: Dan Streetman <ddstreet@ieee.org>
2023-10-12 14:22:26 -07:00
jslobodzian eb08b37916
Bump package version to recompile binaries with fixed gcc stack prote… (#6253)
* Bump package version to recompile binaries with fixed gcc stack protection (CVE-2023-4039)

* Bump debuginfo versions in toolchain manifests

* Bump kernel headers to match kernel

* Update SPECS/gettext/gettext.spec

Taking suggestion

Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

* Update for code review comments

* Fix for code review comment in qt5-qtdeclarative changelog

* Fix dash version for signed spec files

---------

Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-09-21 17:10:15 -04:00
Muhammad Falak R Wani 55e9faacd9
nginx: add otel_ngx_module subpackage (#6012)
Add OpenTelemetry distributed tracing support to nginx.

Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-08-23 07:05:05 +05:30
Muhammad Falak R Wani a1596d1f4b
nginx: configure with `--with-stream_ssl_module` to enable support for stream proxy server with SSL/TLS (#5975)
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-08-14 09:28:27 +05:30
Muhammad Falak R Wani 2489bb76d4
nginx: configure with `--with-compat` to enable dynamic modules compatibility (#5913)
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-08-04 09:54:32 +05:30
Pete Birley 3e9c3cb502
build nginx with http_gunzip_module (#5827)
Signed-off-by: Pete Birley <petebirley@microsoft.com>
Co-authored-by: Pete Birley <petebirley@microsoft.com>
2023-07-14 09:57:12 -07:00
Olivia Crain 0c48ba0e56
Upgrade bundled njs version in nginx to 0.7.12 to fix CVE-2020-19692, CVE-2020-19695 (#5309) 2023-04-17 09:38:43 -07:00
Mandeep Plaha b3ac18a755
build nginx with http_gzip_static_module (#5223) 2023-04-04 12:42:42 -07:00
Mandeep Plaha 3c22b192ec
Build nginx with ngx_http_realip_module (#5153) 2023-03-27 13:01:40 -07:00
jslobodzian 3f2abd6330
Enable http2 support (#4334) 2022-11-30 21:53:14 -08:00
Cameron E Baird d433fc87df
Reverted `nginx` to stable version 1.22.1 (#4128) 2022-10-28 16:49:05 -07:00
CBL-Mariner-Bot ddb3f9e151
nginx: upgrade to version 1.23.2 (#4092) 2022-10-26 12:37:20 -07:00
Max Brodeur-Urbas cf9d47dd32
nginx: Addressing CVE-2021-3618 (#2823) 2022-04-25 16:38:03 -07:00
Max Brodeur-Urbas 139dbacc80
[main] upgrading nginx to v 1.20.2 (#2306)
* upgrading nginx to v 1.20.2

* applying relevant linting
2022-02-24 10:36:57 -08:00
Pawel Winogrodzki c639bdcaeb
[dev] Resolving conflicts between `nginx` and `nginx-mimetypes`. (#1529) 2021-10-13 23:31:16 -07:00
jslobodzian 17b0e93e71
Merge 1.0 to dev branch
This merge brings the latest SELinux and many packages and CVE fixes from the 1.0 branch.
2021-08-19 13:46:51 -07:00
Thomas Crain eae5b4006f Merge branch '1.0' into thcrain/ever-given 2021-04-06 22:39:22 -05:00
Henry Li 24bd3e163a
[dev] Update httpd and nginx (#632)
* save changes for htppd

* save changes to httpd and nginx

* update httpd

* remove useless file and update httpd

* apply spec-cleaning

* remove httpd-filesystem and nginx-filesystem

* remove unneeded changes

* update httpd signature and remove unnecessary Requires

* update signature.json

Co-authored-by: Henry Li <lihl@microsoft.com>
2021-02-12 17:01:13 -08:00
nicolas guibourge 3af9abb617
nopatch nginx CVE-2009-4487 (#394) 2020-11-17 12:40:54 -08:00
Henry Li 453926a1ca fix SPEC format 2020-10-28 11:26:27 -07:00
Henry Li b4894f7ab7 fix nginx CVE 2020-10-28 10:59:41 -07:00
Jon Slobodzian b877013b27 Initial CBL-Mariner commit to GitHub 2020-08-06 20:17:52 -07:00