<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4">
<package pkgid="6f16d5074c75ac81e164ae0659e17b8709bf658cf996c75efb9acba288b8be35" name="nginx" arch="src">
    <version epoch="0" ver="1.10.1" rel="71.1"/>

<changelog author="i@marguerite.su" date="1408363200">- clean specfile
- fix for x86_64 builds for 11.4-
  * can't build with -fPIE</changelog>
<changelog author="i@marguerite.su" date="1408363201">- update version 1.6.1 stable
  * Security: pipelined commands were not discarded after STARTTLS
    command in SMTP proxy (CVE-2014-3556)
  * Bugfix: the $uri variable might contain garbage when returning
    errors with code 400
  * Bugfix: in the "none" parameter in the "smtp_auth" directive
- drop nginx-1.0.4_default_config.patch
- add nginx-1.6.1-default_config.patch</changelog>
<changelog author="i@marguerite.su" date="1408363202">- disable passenger for 1320 as rubygem-passenger isn't in Factory</changelog>
<changelog author="i@marguerite.su" date="1409918400">- use /run as pid/lock directory on openSUSE Factory (13.2=+)</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 1.6.2 stable
  * Security: it was possible to reuse SSL sessions in unrelated
    contexts if a shared SSL session cache or the same TLS session
    ticket key was used for multiple "server" blocks (CVE-2014-3616).
    Thanks to Antoine Delignat-Lavaud.
  * Bugfix: requests might hang if resolver was used and a DNS server
    returned a malformed response; the bug had appeared in 1.5.8.
  * Bugfix: requests might hang if resolver was used and a timeout
    occurred during a DNS request.</changelog>
<changelog author="vpereirabr@opensuse.org" date="1427284800">- On OpenSUSE 13.2, it requires libGeoIP-devel</changelog>
<changelog author="mrueckert@suse.de" date="1428840000">- update version 1.6.3 stable
  - Feature: now the "tcp_nodelay" directive works with SPDY
    connections.
  - Bugfix: in error handling.  Thanks to Yichun Zhang and Daniil
    Bondarev.
  - Bugfix: alerts "header already sent" appeared in logs if the
    "post_action" directive was used; the bug had appeared in
    1.5.4.
  - Bugfix: alerts "sem_post() failed" might appear in logs.
  - Bugfix: in hash table handling.  Thanks to Chris West.
  - Bugfix: in integer overflow handling.  Thanks to Régis Leroy.
- no longer install the init script when using systemd service file
- create rcnginx for systemd case</changelog>
<changelog author="mrueckert@suse.de" date="1428840001">- enable ngx_http_auth_request_module</changelog>
<changelog author="mrueckert@suse.de" date="1428840002">- disable libatomic-ops on SLE12 for now. the library seems not
  available there.</changelog>
<changelog author="i@marguerite.su" date="1434024000">- update version 1.8.0 stable
  * refer to http://nginx.org/en/CHANGES-1.8 for 1.7.x changes
- enable thread pools invented in nginx 1.7.11
- refactor nginx-1.4.2-passenger_fix.patch
  * rename to nginx-1.4.2-passenger-4.0.18.patch
  * remove zero_in_uri usage
- add patch: nginx-1.8.0-passenger-4.0.18.patch
  * fix "warning: comparison between pointer and integer"
    and "error: invalid type argument of ?-&gt;? (have ?int?)"
- drop nginx-1.4.4-passenger-4.0.33_fix.patch
  * webyast is dead, we only enable passenger on 13.1 and below,
    for compatibility. this patch will never be applied now.
- drop nginx-1.4.4-passenger-3.0.12_fix.patch
  * this patch intended to be applied on &lt; 13.1 machines, but
    13.1 is the oldest one we still have to build against.
- update fancyindex to version 0.3.5</changelog>
<changelog author="mrueckert@suse.de" date="1444996800">- clean up conditionals and use bcond_with* everywhere
- drop passenger support for now
  * drop nginx-1.8.0-passenger-4.0.18.patch
  * drop nginx-1.4.2-passenger-4.0.18.patch</changelog>
<changelog author="mrueckert@suse.de" date="1444996801">- replace custom "kill -QUIT" with the kill signal setting in
  the service file</changelog>
<changelog author="mrueckert@suse.de" date="1444996802">- use libGeoIP-devel everywhere</changelog>
<changelog author="i@marguerite.su" date="1453982400">- update version 1.8.1 stable
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742). boo#963781
  ?* Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746). boo#963778
  ?* Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747). boo#963775
  ?* Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: if nginx was built with the ngx_http_spdy_module it was
    possible to use the SPDY protocol even if the "spdy" parameter of the
    "listen" directive was not specified.</changelog>
<changelog author="dmacvicar@suse.de" date="1462536000">- update to version 1.10.0 stable
  * Bugfix: "recv() failed" errors might occur when using HHVM as a
    FastCGI server.
  * Bugfix: when using HTTP/2 and the "limit_req" or "auth_request"
    directives a timeout or a "client violated flow control" error might
    occur while reading client request body; the bug had appeared in
    1.9.14.
  * Workaround: a response might not be shown by some browsers if HTTP/2
    was used and client request body was not fully read; the bug had
    appeared in 1.9.14.
  * Bugfix: connections might hang when using the "aio threads"
    directive.
    Thanks to Mindaugas Rasiukevicius.
  * Feature: OpenSSL 1.1.0 compatibility.
  * Feature: the "proxy_request_buffering", "fastcgi_request_buffering",
    "scgi_request_buffering", and "uwsgi_request_buffering" directives
    now work with HTTP/2.
  * Bugfix: "zero size buf in output" alerts might appear in logs when
    using HTTP/2.
  * Bugfix: the "client_max_body_size" directive might work incorrectly
    when using HTTP/2.
  * Bugfix: of minor bugs in logging.
  * Change: non-idempotent requests (POST, LOCK, PATCH) are no longer
    passed to the next server by default if a request has been sent to a
    backend; the "non_idempotent" parameter of the "proxy_next_upstream"
    directive explicitly allows retrying such requests.
  * Feature: the ngx_http_perl_module can be built dynamically.
  * Feature: UDP support in the stream module.
  * Feature: the "aio_write" directive.
  * Feature: now cache manager monitors number of elements in caches and
    tries to avoid cache keys zone overflows.
  * Bugfix: "task already active" and "second aio post" alerts might
    appear in logs when using the "sendfile" and "aio" directives with
    subrequests.
  * Bugfix: "zero size buf in output" alerts might appear in logs if
    caching was used and a client closed a connection prematurely.
  * Bugfix: connections with clients might be closed needlessly if
    caching was used.
    Thanks to Justin Li.
  * Bugfix: nginx might hog CPU if the "sendfile" directive was used on
    Linux or Solaris and a file being sent was changed during sending.
  * Bugfix: connections might hang when using the "sendfile" and "aio
    threads" directives.
  * Bugfix: in the "proxy_pass", "fastcgi_pass", "scgi_pass", and
    "uwsgi_pass" directives when using variables.
    Thanks to Piotr Sikora.
  * Bugfix: in the ngx_http_sub_filter_module.
  * Bugfix: if an error occurred in a cached backend connection, the
    request was passed to the next server regardless of the
    proxy_next_upstream directive.
  * Bugfix: "CreateFile() failed" errors when creating temporary files on
    Windows.
  * Feature: Huffman encoding of response headers in HTTP/2.
    Thanks to Vlad Krasnov.
  * Feature: the "worker_cpu_affinity" directive now supports more than
    64 CPUs.
  * Bugfix: compatibility with 3rd party C++ modules; the bug had
    appeared in 1.9.11.
    Thanks to Piotr Sikora.
  * Bugfix: nginx could not be built statically with OpenSSL on Linux;
    the bug had appeared in 1.9.11.
  * Bugfix: the "add_header ... always" directive with an empty value did
    not delete "Last-Modified" and "ETag" header lines from error
    responses.
  * Workaround: "called a function you should not call" and "shutdown
    while in init" messages might appear in logs when using OpenSSL
    1.0.2f.
  * Bugfix: invalid headers might be logged incorrectly.
  * Bugfix: socket leak when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Feature: TCP support in resolver.
  * Feature: dynamic modules.
  * Bugfix: the $request_length variable did not include size of request
    headers when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742).
  * Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746).
  * Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747).
  * Feature: the "auto" parameter of the "worker_cpu_affinity" directive.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work with IPv6 listen sockets.
  * Bugfix: connections to upstream servers might be cached incorrectly
    when using the "keepalive" directive.
  * Bugfix: proxying used the HTTP method of the original request after
    an "X-Accel-Redirect" redirection.
  * Bugfix: proxying to unix domain sockets did not work when using
    variables; the bug had appeared in 1.9.8.
  * Feature: pwritev() support.
  * Feature: the "include" directive inside the "upstream" block.
  * Feature: the ngx_http_slice_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using LibreSSL; the bug had appeared in 1.9.6.
  * Bugfix: nginx could not be built on OS X in some cases.
  * Feature: the "nohostname" parameter of logging to syslog.
  * Feature: the "proxy_cache_convert_head" directive.
  * Feature: the $realip_remote_addr variable in the
    ngx_http_realip_module.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2; the bug had appeared in 1.9.6.
  * Bugfix: if nginx was built with the ngx_http_v2_module it was
    possible to use the HTTP/2 protocol even if the "http2" parameter of
    the "listen" directive was not specified.
  * Bugfix: in the ngx_http_v2_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2.
    Thanks to Piotr Sikora and Denis Andzakovic.
  * Bugfix: the $server_protocol variable was empty when using HTTP/2.
  * Bugfix: backend SSL connections in the stream module might be timed
    out unexpectedly.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: nginx/Windows could not be built with MinGW gcc; the bug had
    appeared in 1.9.4.
    Thanks to Kouhei Sutou.
  * Bugfix: time was not updated when the timer_resolution directive was
    used on Windows.
  * Miscellaneous minor fixes and improvements.
    Thanks to Markus Linnala, Kurtis Nusbaum and Piotr Sikora.
  * Feature: the ngx_http_v2_module (replaces ngx_http_spdy_module).
    Thanks to Dropbox and Automattic for sponsoring this work.
  * Change: now the "output_buffers" directive uses two buffers by
    default.
  * Change: now nginx limits subrequests recursion, not simultaneous
    subrequests.
  * Change: now nginx checks the whole cache key when returning a
    response from cache.
    Thanks to Gena Makhomed and Sergey Brester.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: "writev() failed (4: Interrupted system call)" errors might
    appear in logs when using CephFS and the "timer_resolution" directive
    on Linux.
  * Bugfix: in invalid configurations handling.
    Thanks to Markus Linnala.
  * Bugfix: a segmentation fault occurred in a worker process if the
    "sub_filter" directive was used at http level; the bug had appeared
    in 1.9.4.
  * Change: the "proxy_downstream_buffer" and "proxy_upstream_buffer"
    directives of the stream module are replaced with the
    "proxy_buffer_size" directive.
  * Feature: the "tcp_nodelay" directive in the stream module.
  * Feature: multiple "sub_filter" directives can be used simultaneously.
  * Feature: variables support in the search string of the "sub_filter"
    directive.
  * Workaround: configuration testing might fail under Linux OpenVZ.
    Thanks to Gena Makhomed.
  * Bugfix: old worker processes might hog CPU after reconfiguration with
    a large number of worker_connections.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: in hash table initialization error handling.
  * Bugfix: nginx could not be built with Visual Studio 2015.
  * Change: duplicate "http", "mail", and "stream" blocks are now
    disallowed.
  * Feature: connection limiting in the stream module.
  * Feature: data rate limiting in the stream module.
  * Bugfix: the "zone" directive inside the "upstream" block did not work
    on Windows.
  * Bugfix: compatibility with LibreSSL in the stream module.
    Thanks to Piotr Sikora.
  * Bugfix: in the "--builddir" configure parameter.
    Thanks to Piotr Sikora.
  * Bugfix: the "ssl_stapling_file" directive did not work; the bug had
    appeared in 1.9.2.
    Thanks to Faidon Liambotis and Brandon Black.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "ssl_stapling" directive was used; the bug had appeared in 1.9.2.
    Thanks to Matthew Baldwin.
  * Feature: the "backlog" parameter of the "listen" directives of the
    mail proxy and stream modules.
  * Feature: the "allow" and "deny" directives in the stream module.
  * Feature: the "proxy_bind" directive in the stream module.
  * Feature: the "proxy_protocol" directive in the stream module.
  * Feature: the -T switch.
  * Feature: the REQUEST_SCHEME parameter added to the fastcgi.conf,
    fastcgi_params, scgi_params, and uwsgi_params standard configuration
    files.
  * Bugfix: the "reuseport" parameter of the "listen" directive of the
    stream module did not work.
  * Bugfix: OCSP stapling might return an expired OCSP response in some
    cases.
  * Change: now SSLv3 protocol is disabled by default.
  * Change: some long deprecated directives are not supported anymore.
  * Feature: the "reuseport" parameter of the "listen" directive.
    Thanks to Yingqi Lu at Intel and Sepherosa Ziehau.
  * Feature: the $upstream_connect_time variable.
  * Bugfix: in the "hash" directive on big-endian platforms.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: in IP address parsing.
    Thanks to Sergey Polovko.
  * Change: obsolete aio and rtsig event methods have been removed.
  * Feature: the "zone" directive inside the "upstream" block.
  * Feature: the stream module.
  * Feature: byte ranges support in the ngx_http_memcached_module.
    Thanks to Martin Mlyná?.
  * Feature: shared memory can now be used on Windows versions with
    address space layout randomization.
    Thanks to Sergey Brester.
  * Feature: the "error_log" directive can now be used on mail and server
    levels in mail proxy.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
- removed patches already present upstream
  * nginx-0.4.0-no_Werror.patch
- refreshed patches
  * nginx-0.6.38-html.patch to nginx-1.10.0-html.patch
  * nginx-0.4.0-no_Werror.patch to nginx-1.10.0-no_Werror.patch
  * merged nginx-1.0.15_docs.patch in nginx-1.10.0-html.patch
- config option with-http_spdy_module is now with-http_v2_module</changelog>
<changelog author="mrueckert@suse.de" date="1463313600">- enable slice and stream module</changelog>
<changelog author="mrueckert@suse.de" date="1463313601">- enable dynamic modules for intree modules. The following modules
  are built as loadable modules now:
  ngx_http_geoip_module.so
  ngx_http_image_filter_module.so
  ngx_http_perl_module.so
  ngx_http_xslt_filter_module.so
  ngx_mail_module.so
  ngx_stream_module.so
  You will have to load those modules with load_module.
  http://nginx.org/en/docs/ngx_core_module.html#load_module
  The correct syntax for this package is:
  [#] For 64bit machines:
  load_module lib64/nginx/modules/ngx_http_geoip_module.so;
  [#] For 32bit machines:
  load_module lib/nginx/modules/ngx_http_geoip_module.so;
  Examples for all the intree modules have been added to the
  default nginx.conf
- patches updated:
  nginx-1.6.1-default_config.patch - added load_module example</changelog>
<changelog author="mrueckert@suse.de" date="1463313602">- improve conditionals
  - merge the 12.2 and 12.1 based conditionals into 1 as both of
    them are out of support now.
  - enable pcre JIT
  - make use if libatomic_ops on Leap</changelog>
<changelog author="mrueckert@suse.de" date="1464782400">- update to 1.10.1 (bsc# 982505)
  Security: a segmentation fault might occur in a worker process
  while writing a specially crafted request body to a temporary
  file (CVE-2016-4450); the bug had appeared in 1.3.9.</changelog>
<changelog author="mrueckert@suse.de" date="1464868800">- in the sysvinit script use the pid file in /var/run</changelog>

</package>

<package pkgid="3f550a9f771a471117b6805a7d6bc6c2871c70a2b8a0ea52c2b0d279c449e208" name="nginx" arch="x86_64">
    <version epoch="0" ver="1.10.1" rel="71.1"/>

<changelog author="i@marguerite.su" date="1408363200">- clean specfile
- fix for x86_64 builds for 11.4-
  * can't build with -fPIE</changelog>
<changelog author="i@marguerite.su" date="1408363201">- update version 1.6.1 stable
  * Security: pipelined commands were not discarded after STARTTLS
    command in SMTP proxy (CVE-2014-3556)
  * Bugfix: the $uri variable might contain garbage when returning
    errors with code 400
  * Bugfix: in the "none" parameter in the "smtp_auth" directive
- drop nginx-1.0.4_default_config.patch
- add nginx-1.6.1-default_config.patch</changelog>
<changelog author="i@marguerite.su" date="1408363202">- disable passenger for 1320 as rubygem-passenger isn't in Factory</changelog>
<changelog author="i@marguerite.su" date="1409918400">- use /run as pid/lock directory on openSUSE Factory (13.2=+)</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 1.6.2 stable
  * Security: it was possible to reuse SSL sessions in unrelated
    contexts if a shared SSL session cache or the same TLS session
    ticket key was used for multiple "server" blocks (CVE-2014-3616).
    Thanks to Antoine Delignat-Lavaud.
  * Bugfix: requests might hang if resolver was used and a DNS server
    returned a malformed response; the bug had appeared in 1.5.8.
  * Bugfix: requests might hang if resolver was used and a timeout
    occurred during a DNS request.</changelog>
<changelog author="vpereirabr@opensuse.org" date="1427284800">- On OpenSUSE 13.2, it requires libGeoIP-devel</changelog>
<changelog author="mrueckert@suse.de" date="1428840000">- update version 1.6.3 stable
  - Feature: now the "tcp_nodelay" directive works with SPDY
    connections.
  - Bugfix: in error handling.  Thanks to Yichun Zhang and Daniil
    Bondarev.
  - Bugfix: alerts "header already sent" appeared in logs if the
    "post_action" directive was used; the bug had appeared in
    1.5.4.
  - Bugfix: alerts "sem_post() failed" might appear in logs.
  - Bugfix: in hash table handling.  Thanks to Chris West.
  - Bugfix: in integer overflow handling.  Thanks to Régis Leroy.
- no longer install the init script when using systemd service file
- create rcnginx for systemd case</changelog>
<changelog author="mrueckert@suse.de" date="1428840001">- enable ngx_http_auth_request_module</changelog>
<changelog author="mrueckert@suse.de" date="1428840002">- disable libatomic-ops on SLE12 for now. the library seems not
  available there.</changelog>
<changelog author="i@marguerite.su" date="1434024000">- update version 1.8.0 stable
  * refer to http://nginx.org/en/CHANGES-1.8 for 1.7.x changes
- enable thread pools invented in nginx 1.7.11
- refactor nginx-1.4.2-passenger_fix.patch
  * rename to nginx-1.4.2-passenger-4.0.18.patch
  * remove zero_in_uri usage
- add patch: nginx-1.8.0-passenger-4.0.18.patch
  * fix "warning: comparison between pointer and integer"
    and "error: invalid type argument of ?-&gt;? (have ?int?)"
- drop nginx-1.4.4-passenger-4.0.33_fix.patch
  * webyast is dead, we only enable passenger on 13.1 and below,
    for compatibility. this patch will never be applied now.
- drop nginx-1.4.4-passenger-3.0.12_fix.patch
  * this patch intended to be applied on &lt; 13.1 machines, but
    13.1 is the oldest one we still have to build against.
- update fancyindex to version 0.3.5</changelog>
<changelog author="mrueckert@suse.de" date="1444996800">- clean up conditionals and use bcond_with* everywhere
- drop passenger support for now
  * drop nginx-1.8.0-passenger-4.0.18.patch
  * drop nginx-1.4.2-passenger-4.0.18.patch</changelog>
<changelog author="mrueckert@suse.de" date="1444996801">- replace custom "kill -QUIT" with the kill signal setting in
  the service file</changelog>
<changelog author="mrueckert@suse.de" date="1444996802">- use libGeoIP-devel everywhere</changelog>
<changelog author="i@marguerite.su" date="1453982400">- update version 1.8.1 stable
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742). boo#963781
  ?* Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746). boo#963778
  ?* Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747). boo#963775
  ?* Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: if nginx was built with the ngx_http_spdy_module it was
    possible to use the SPDY protocol even if the "spdy" parameter of the
    "listen" directive was not specified.</changelog>
<changelog author="dmacvicar@suse.de" date="1462536000">- update to version 1.10.0 stable
  * Bugfix: "recv() failed" errors might occur when using HHVM as a
    FastCGI server.
  * Bugfix: when using HTTP/2 and the "limit_req" or "auth_request"
    directives a timeout or a "client violated flow control" error might
    occur while reading client request body; the bug had appeared in
    1.9.14.
  * Workaround: a response might not be shown by some browsers if HTTP/2
    was used and client request body was not fully read; the bug had
    appeared in 1.9.14.
  * Bugfix: connections might hang when using the "aio threads"
    directive.
    Thanks to Mindaugas Rasiukevicius.
  * Feature: OpenSSL 1.1.0 compatibility.
  * Feature: the "proxy_request_buffering", "fastcgi_request_buffering",
    "scgi_request_buffering", and "uwsgi_request_buffering" directives
    now work with HTTP/2.
  * Bugfix: "zero size buf in output" alerts might appear in logs when
    using HTTP/2.
  * Bugfix: the "client_max_body_size" directive might work incorrectly
    when using HTTP/2.
  * Bugfix: of minor bugs in logging.
  * Change: non-idempotent requests (POST, LOCK, PATCH) are no longer
    passed to the next server by default if a request has been sent to a
    backend; the "non_idempotent" parameter of the "proxy_next_upstream"
    directive explicitly allows retrying such requests.
  * Feature: the ngx_http_perl_module can be built dynamically.
  * Feature: UDP support in the stream module.
  * Feature: the "aio_write" directive.
  * Feature: now cache manager monitors number of elements in caches and
    tries to avoid cache keys zone overflows.
  * Bugfix: "task already active" and "second aio post" alerts might
    appear in logs when using the "sendfile" and "aio" directives with
    subrequests.
  * Bugfix: "zero size buf in output" alerts might appear in logs if
    caching was used and a client closed a connection prematurely.
  * Bugfix: connections with clients might be closed needlessly if
    caching was used.
    Thanks to Justin Li.
  * Bugfix: nginx might hog CPU if the "sendfile" directive was used on
    Linux or Solaris and a file being sent was changed during sending.
  * Bugfix: connections might hang when using the "sendfile" and "aio
    threads" directives.
  * Bugfix: in the "proxy_pass", "fastcgi_pass", "scgi_pass", and
    "uwsgi_pass" directives when using variables.
    Thanks to Piotr Sikora.
  * Bugfix: in the ngx_http_sub_filter_module.
  * Bugfix: if an error occurred in a cached backend connection, the
    request was passed to the next server regardless of the
    proxy_next_upstream directive.
  * Bugfix: "CreateFile() failed" errors when creating temporary files on
    Windows.
  * Feature: Huffman encoding of response headers in HTTP/2.
    Thanks to Vlad Krasnov.
  * Feature: the "worker_cpu_affinity" directive now supports more than
    64 CPUs.
  * Bugfix: compatibility with 3rd party C++ modules; the bug had
    appeared in 1.9.11.
    Thanks to Piotr Sikora.
  * Bugfix: nginx could not be built statically with OpenSSL on Linux;
    the bug had appeared in 1.9.11.
  * Bugfix: the "add_header ... always" directive with an empty value did
    not delete "Last-Modified" and "ETag" header lines from error
    responses.
  * Workaround: "called a function you should not call" and "shutdown
    while in init" messages might appear in logs when using OpenSSL
    1.0.2f.
  * Bugfix: invalid headers might be logged incorrectly.
  * Bugfix: socket leak when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Feature: TCP support in resolver.
  * Feature: dynamic modules.
  * Bugfix: the $request_length variable did not include size of request
    headers when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742).
  * Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746).
  * Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747).
  * Feature: the "auto" parameter of the "worker_cpu_affinity" directive.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work with IPv6 listen sockets.
  * Bugfix: connections to upstream servers might be cached incorrectly
    when using the "keepalive" directive.
  * Bugfix: proxying used the HTTP method of the original request after
    an "X-Accel-Redirect" redirection.
  * Bugfix: proxying to unix domain sockets did not work when using
    variables; the bug had appeared in 1.9.8.
  * Feature: pwritev() support.
  * Feature: the "include" directive inside the "upstream" block.
  * Feature: the ngx_http_slice_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using LibreSSL; the bug had appeared in 1.9.6.
  * Bugfix: nginx could not be built on OS X in some cases.
  * Feature: the "nohostname" parameter of logging to syslog.
  * Feature: the "proxy_cache_convert_head" directive.
  * Feature: the $realip_remote_addr variable in the
    ngx_http_realip_module.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2; the bug had appeared in 1.9.6.
  * Bugfix: if nginx was built with the ngx_http_v2_module it was
    possible to use the HTTP/2 protocol even if the "http2" parameter of
    the "listen" directive was not specified.
  * Bugfix: in the ngx_http_v2_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2.
    Thanks to Piotr Sikora and Denis Andzakovic.
  * Bugfix: the $server_protocol variable was empty when using HTTP/2.
  * Bugfix: backend SSL connections in the stream module might be timed
    out unexpectedly.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: nginx/Windows could not be built with MinGW gcc; the bug had
    appeared in 1.9.4.
    Thanks to Kouhei Sutou.
  * Bugfix: time was not updated when the timer_resolution directive was
    used on Windows.
  * Miscellaneous minor fixes and improvements.
    Thanks to Markus Linnala, Kurtis Nusbaum and Piotr Sikora.
  * Feature: the ngx_http_v2_module (replaces ngx_http_spdy_module).
    Thanks to Dropbox and Automattic for sponsoring this work.
  * Change: now the "output_buffers" directive uses two buffers by
    default.
  * Change: now nginx limits subrequests recursion, not simultaneous
    subrequests.
  * Change: now nginx checks the whole cache key when returning a
    response from cache.
    Thanks to Gena Makhomed and Sergey Brester.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: "writev() failed (4: Interrupted system call)" errors might
    appear in logs when using CephFS and the "timer_resolution" directive
    on Linux.
  * Bugfix: in invalid configurations handling.
    Thanks to Markus Linnala.
  * Bugfix: a segmentation fault occurred in a worker process if the
    "sub_filter" directive was used at http level; the bug had appeared
    in 1.9.4.
  * Change: the "proxy_downstream_buffer" and "proxy_upstream_buffer"
    directives of the stream module are replaced with the
    "proxy_buffer_size" directive.
  * Feature: the "tcp_nodelay" directive in the stream module.
  * Feature: multiple "sub_filter" directives can be used simultaneously.
  * Feature: variables support in the search string of the "sub_filter"
    directive.
  * Workaround: configuration testing might fail under Linux OpenVZ.
    Thanks to Gena Makhomed.
  * Bugfix: old worker processes might hog CPU after reconfiguration with
    a large number of worker_connections.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: in hash table initialization error handling.
  * Bugfix: nginx could not be built with Visual Studio 2015.
  * Change: duplicate "http", "mail", and "stream" blocks are now
    disallowed.
  * Feature: connection limiting in the stream module.
  * Feature: data rate limiting in the stream module.
  * Bugfix: the "zone" directive inside the "upstream" block did not work
    on Windows.
  * Bugfix: compatibility with LibreSSL in the stream module.
    Thanks to Piotr Sikora.
  * Bugfix: in the "--builddir" configure parameter.
    Thanks to Piotr Sikora.
  * Bugfix: the "ssl_stapling_file" directive did not work; the bug had
    appeared in 1.9.2.
    Thanks to Faidon Liambotis and Brandon Black.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "ssl_stapling" directive was used; the bug had appeared in 1.9.2.
    Thanks to Matthew Baldwin.
  * Feature: the "backlog" parameter of the "listen" directives of the
    mail proxy and stream modules.
  * Feature: the "allow" and "deny" directives in the stream module.
  * Feature: the "proxy_bind" directive in the stream module.
  * Feature: the "proxy_protocol" directive in the stream module.
  * Feature: the -T switch.
  * Feature: the REQUEST_SCHEME parameter added to the fastcgi.conf,
    fastcgi_params, scgi_params, and uwsgi_params standard configuration
    files.
  * Bugfix: the "reuseport" parameter of the "listen" directive of the
    stream module did not work.
  * Bugfix: OCSP stapling might return an expired OCSP response in some
    cases.
  * Change: now SSLv3 protocol is disabled by default.
  * Change: some long deprecated directives are not supported anymore.
  * Feature: the "reuseport" parameter of the "listen" directive.
    Thanks to Yingqi Lu at Intel and Sepherosa Ziehau.
  * Feature: the $upstream_connect_time variable.
  * Bugfix: in the "hash" directive on big-endian platforms.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: in IP address parsing.
    Thanks to Sergey Polovko.
  * Change: obsolete aio and rtsig event methods have been removed.
  * Feature: the "zone" directive inside the "upstream" block.
  * Feature: the stream module.
  * Feature: byte ranges support in the ngx_http_memcached_module.
    Thanks to Martin Mlyná?.
  * Feature: shared memory can now be used on Windows versions with
    address space layout randomization.
    Thanks to Sergey Brester.
  * Feature: the "error_log" directive can now be used on mail and server
    levels in mail proxy.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
- removed patches already present upstream
  * nginx-0.4.0-no_Werror.patch
- refreshed patches
  * nginx-0.6.38-html.patch to nginx-1.10.0-html.patch
  * nginx-0.4.0-no_Werror.patch to nginx-1.10.0-no_Werror.patch
  * merged nginx-1.0.15_docs.patch in nginx-1.10.0-html.patch
- config option with-http_spdy_module is now with-http_v2_module</changelog>
<changelog author="mrueckert@suse.de" date="1463313600">- enable slice and stream module</changelog>
<changelog author="mrueckert@suse.de" date="1463313601">- enable dynamic modules for intree modules. The following modules
  are built as loadable modules now:
  ngx_http_geoip_module.so
  ngx_http_image_filter_module.so
  ngx_http_perl_module.so
  ngx_http_xslt_filter_module.so
  ngx_mail_module.so
  ngx_stream_module.so
  You will have to load those modules with load_module.
  http://nginx.org/en/docs/ngx_core_module.html#load_module
  The correct syntax for this package is:
  [#] For 64bit machines:
  load_module lib64/nginx/modules/ngx_http_geoip_module.so;
  [#] For 32bit machines:
  load_module lib/nginx/modules/ngx_http_geoip_module.so;
  Examples for all the intree modules have been added to the
  default nginx.conf
- patches updated:
  nginx-1.6.1-default_config.patch - added load_module example</changelog>
<changelog author="mrueckert@suse.de" date="1463313602">- improve conditionals
  - merge the 12.2 and 12.1 based conditionals into 1 as both of
    them are out of support now.
  - enable pcre JIT
  - make use if libatomic_ops on Leap</changelog>
<changelog author="mrueckert@suse.de" date="1464782400">- update to 1.10.1 (bsc# 982505)
  Security: a segmentation fault might occur in a worker process
  while writing a specially crafted request body to a temporary
  file (CVE-2016-4450); the bug had appeared in 1.3.9.</changelog>
<changelog author="mrueckert@suse.de" date="1464868800">- in the sysvinit script use the pid file in /var/run</changelog>

</package>

<package pkgid="54aeb573dde8578538a906bea752777e2730c6d09ad66850270cf72e4c9693bc" name="nginx-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.10.1" rel="71.1"/>

<changelog author="i@marguerite.su" date="1408363200">- clean specfile
- fix for x86_64 builds for 11.4-
  * can't build with -fPIE</changelog>
<changelog author="i@marguerite.su" date="1408363201">- update version 1.6.1 stable
  * Security: pipelined commands were not discarded after STARTTLS
    command in SMTP proxy (CVE-2014-3556)
  * Bugfix: the $uri variable might contain garbage when returning
    errors with code 400
  * Bugfix: in the "none" parameter in the "smtp_auth" directive
- drop nginx-1.0.4_default_config.patch
- add nginx-1.6.1-default_config.patch</changelog>
<changelog author="i@marguerite.su" date="1408363202">- disable passenger for 1320 as rubygem-passenger isn't in Factory</changelog>
<changelog author="i@marguerite.su" date="1409918400">- use /run as pid/lock directory on openSUSE Factory (13.2=+)</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 1.6.2 stable
  * Security: it was possible to reuse SSL sessions in unrelated
    contexts if a shared SSL session cache or the same TLS session
    ticket key was used for multiple "server" blocks (CVE-2014-3616).
    Thanks to Antoine Delignat-Lavaud.
  * Bugfix: requests might hang if resolver was used and a DNS server
    returned a malformed response; the bug had appeared in 1.5.8.
  * Bugfix: requests might hang if resolver was used and a timeout
    occurred during a DNS request.</changelog>
<changelog author="vpereirabr@opensuse.org" date="1427284800">- On OpenSUSE 13.2, it requires libGeoIP-devel</changelog>
<changelog author="mrueckert@suse.de" date="1428840000">- update version 1.6.3 stable
  - Feature: now the "tcp_nodelay" directive works with SPDY
    connections.
  - Bugfix: in error handling.  Thanks to Yichun Zhang and Daniil
    Bondarev.
  - Bugfix: alerts "header already sent" appeared in logs if the
    "post_action" directive was used; the bug had appeared in
    1.5.4.
  - Bugfix: alerts "sem_post() failed" might appear in logs.
  - Bugfix: in hash table handling.  Thanks to Chris West.
  - Bugfix: in integer overflow handling.  Thanks to Régis Leroy.
- no longer install the init script when using systemd service file
- create rcnginx for systemd case</changelog>
<changelog author="mrueckert@suse.de" date="1428840001">- enable ngx_http_auth_request_module</changelog>
<changelog author="mrueckert@suse.de" date="1428840002">- disable libatomic-ops on SLE12 for now. the library seems not
  available there.</changelog>
<changelog author="i@marguerite.su" date="1434024000">- update version 1.8.0 stable
  * refer to http://nginx.org/en/CHANGES-1.8 for 1.7.x changes
- enable thread pools invented in nginx 1.7.11
- refactor nginx-1.4.2-passenger_fix.patch
  * rename to nginx-1.4.2-passenger-4.0.18.patch
  * remove zero_in_uri usage
- add patch: nginx-1.8.0-passenger-4.0.18.patch
  * fix "warning: comparison between pointer and integer"
    and "error: invalid type argument of ?-&gt;? (have ?int?)"
- drop nginx-1.4.4-passenger-4.0.33_fix.patch
  * webyast is dead, we only enable passenger on 13.1 and below,
    for compatibility. this patch will never be applied now.
- drop nginx-1.4.4-passenger-3.0.12_fix.patch
  * this patch intended to be applied on &lt; 13.1 machines, but
    13.1 is the oldest one we still have to build against.
- update fancyindex to version 0.3.5</changelog>
<changelog author="mrueckert@suse.de" date="1444996800">- clean up conditionals and use bcond_with* everywhere
- drop passenger support for now
  * drop nginx-1.8.0-passenger-4.0.18.patch
  * drop nginx-1.4.2-passenger-4.0.18.patch</changelog>
<changelog author="mrueckert@suse.de" date="1444996801">- replace custom "kill -QUIT" with the kill signal setting in
  the service file</changelog>
<changelog author="mrueckert@suse.de" date="1444996802">- use libGeoIP-devel everywhere</changelog>
<changelog author="i@marguerite.su" date="1453982400">- update version 1.8.1 stable
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742). boo#963781
  ?* Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746). boo#963778
  ?* Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747). boo#963775
  ?* Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: if nginx was built with the ngx_http_spdy_module it was
    possible to use the SPDY protocol even if the "spdy" parameter of the
    "listen" directive was not specified.</changelog>
<changelog author="dmacvicar@suse.de" date="1462536000">- update to version 1.10.0 stable
  * Bugfix: "recv() failed" errors might occur when using HHVM as a
    FastCGI server.
  * Bugfix: when using HTTP/2 and the "limit_req" or "auth_request"
    directives a timeout or a "client violated flow control" error might
    occur while reading client request body; the bug had appeared in
    1.9.14.
  * Workaround: a response might not be shown by some browsers if HTTP/2
    was used and client request body was not fully read; the bug had
    appeared in 1.9.14.
  * Bugfix: connections might hang when using the "aio threads"
    directive.
    Thanks to Mindaugas Rasiukevicius.
  * Feature: OpenSSL 1.1.0 compatibility.
  * Feature: the "proxy_request_buffering", "fastcgi_request_buffering",
    "scgi_request_buffering", and "uwsgi_request_buffering" directives
    now work with HTTP/2.
  * Bugfix: "zero size buf in output" alerts might appear in logs when
    using HTTP/2.
  * Bugfix: the "client_max_body_size" directive might work incorrectly
    when using HTTP/2.
  * Bugfix: of minor bugs in logging.
  * Change: non-idempotent requests (POST, LOCK, PATCH) are no longer
    passed to the next server by default if a request has been sent to a
    backend; the "non_idempotent" parameter of the "proxy_next_upstream"
    directive explicitly allows retrying such requests.
  * Feature: the ngx_http_perl_module can be built dynamically.
  * Feature: UDP support in the stream module.
  * Feature: the "aio_write" directive.
  * Feature: now cache manager monitors number of elements in caches and
    tries to avoid cache keys zone overflows.
  * Bugfix: "task already active" and "second aio post" alerts might
    appear in logs when using the "sendfile" and "aio" directives with
    subrequests.
  * Bugfix: "zero size buf in output" alerts might appear in logs if
    caching was used and a client closed a connection prematurely.
  * Bugfix: connections with clients might be closed needlessly if
    caching was used.
    Thanks to Justin Li.
  * Bugfix: nginx might hog CPU if the "sendfile" directive was used on
    Linux or Solaris and a file being sent was changed during sending.
  * Bugfix: connections might hang when using the "sendfile" and "aio
    threads" directives.
  * Bugfix: in the "proxy_pass", "fastcgi_pass", "scgi_pass", and
    "uwsgi_pass" directives when using variables.
    Thanks to Piotr Sikora.
  * Bugfix: in the ngx_http_sub_filter_module.
  * Bugfix: if an error occurred in a cached backend connection, the
    request was passed to the next server regardless of the
    proxy_next_upstream directive.
  * Bugfix: "CreateFile() failed" errors when creating temporary files on
    Windows.
  * Feature: Huffman encoding of response headers in HTTP/2.
    Thanks to Vlad Krasnov.
  * Feature: the "worker_cpu_affinity" directive now supports more than
    64 CPUs.
  * Bugfix: compatibility with 3rd party C++ modules; the bug had
    appeared in 1.9.11.
    Thanks to Piotr Sikora.
  * Bugfix: nginx could not be built statically with OpenSSL on Linux;
    the bug had appeared in 1.9.11.
  * Bugfix: the "add_header ... always" directive with an empty value did
    not delete "Last-Modified" and "ETag" header lines from error
    responses.
  * Workaround: "called a function you should not call" and "shutdown
    while in init" messages might appear in logs when using OpenSSL
    1.0.2f.
  * Bugfix: invalid headers might be logged incorrectly.
  * Bugfix: socket leak when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Feature: TCP support in resolver.
  * Feature: dynamic modules.
  * Bugfix: the $request_length variable did not include size of request
    headers when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742).
  * Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746).
  * Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747).
  * Feature: the "auto" parameter of the "worker_cpu_affinity" directive.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work with IPv6 listen sockets.
  * Bugfix: connections to upstream servers might be cached incorrectly
    when using the "keepalive" directive.
  * Bugfix: proxying used the HTTP method of the original request after
    an "X-Accel-Redirect" redirection.
  * Bugfix: proxying to unix domain sockets did not work when using
    variables; the bug had appeared in 1.9.8.
  * Feature: pwritev() support.
  * Feature: the "include" directive inside the "upstream" block.
  * Feature: the ngx_http_slice_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using LibreSSL; the bug had appeared in 1.9.6.
  * Bugfix: nginx could not be built on OS X in some cases.
  * Feature: the "nohostname" parameter of logging to syslog.
  * Feature: the "proxy_cache_convert_head" directive.
  * Feature: the $realip_remote_addr variable in the
    ngx_http_realip_module.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2; the bug had appeared in 1.9.6.
  * Bugfix: if nginx was built with the ngx_http_v2_module it was
    possible to use the HTTP/2 protocol even if the "http2" parameter of
    the "listen" directive was not specified.
  * Bugfix: in the ngx_http_v2_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2.
    Thanks to Piotr Sikora and Denis Andzakovic.
  * Bugfix: the $server_protocol variable was empty when using HTTP/2.
  * Bugfix: backend SSL connections in the stream module might be timed
    out unexpectedly.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: nginx/Windows could not be built with MinGW gcc; the bug had
    appeared in 1.9.4.
    Thanks to Kouhei Sutou.
  * Bugfix: time was not updated when the timer_resolution directive was
    used on Windows.
  * Miscellaneous minor fixes and improvements.
    Thanks to Markus Linnala, Kurtis Nusbaum and Piotr Sikora.
  * Feature: the ngx_http_v2_module (replaces ngx_http_spdy_module).
    Thanks to Dropbox and Automattic for sponsoring this work.
  * Change: now the "output_buffers" directive uses two buffers by
    default.
  * Change: now nginx limits subrequests recursion, not simultaneous
    subrequests.
  * Change: now nginx checks the whole cache key when returning a
    response from cache.
    Thanks to Gena Makhomed and Sergey Brester.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: "writev() failed (4: Interrupted system call)" errors might
    appear in logs when using CephFS and the "timer_resolution" directive
    on Linux.
  * Bugfix: in invalid configurations handling.
    Thanks to Markus Linnala.
  * Bugfix: a segmentation fault occurred in a worker process if the
    "sub_filter" directive was used at http level; the bug had appeared
    in 1.9.4.
  * Change: the "proxy_downstream_buffer" and "proxy_upstream_buffer"
    directives of the stream module are replaced with the
    "proxy_buffer_size" directive.
  * Feature: the "tcp_nodelay" directive in the stream module.
  * Feature: multiple "sub_filter" directives can be used simultaneously.
  * Feature: variables support in the search string of the "sub_filter"
    directive.
  * Workaround: configuration testing might fail under Linux OpenVZ.
    Thanks to Gena Makhomed.
  * Bugfix: old worker processes might hog CPU after reconfiguration with
    a large number of worker_connections.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: in hash table initialization error handling.
  * Bugfix: nginx could not be built with Visual Studio 2015.
  * Change: duplicate "http", "mail", and "stream" blocks are now
    disallowed.
  * Feature: connection limiting in the stream module.
  * Feature: data rate limiting in the stream module.
  * Bugfix: the "zone" directive inside the "upstream" block did not work
    on Windows.
  * Bugfix: compatibility with LibreSSL in the stream module.
    Thanks to Piotr Sikora.
  * Bugfix: in the "--builddir" configure parameter.
    Thanks to Piotr Sikora.
  * Bugfix: the "ssl_stapling_file" directive did not work; the bug had
    appeared in 1.9.2.
    Thanks to Faidon Liambotis and Brandon Black.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "ssl_stapling" directive was used; the bug had appeared in 1.9.2.
    Thanks to Matthew Baldwin.
  * Feature: the "backlog" parameter of the "listen" directives of the
    mail proxy and stream modules.
  * Feature: the "allow" and "deny" directives in the stream module.
  * Feature: the "proxy_bind" directive in the stream module.
  * Feature: the "proxy_protocol" directive in the stream module.
  * Feature: the -T switch.
  * Feature: the REQUEST_SCHEME parameter added to the fastcgi.conf,
    fastcgi_params, scgi_params, and uwsgi_params standard configuration
    files.
  * Bugfix: the "reuseport" parameter of the "listen" directive of the
    stream module did not work.
  * Bugfix: OCSP stapling might return an expired OCSP response in some
    cases.
  * Change: now SSLv3 protocol is disabled by default.
  * Change: some long deprecated directives are not supported anymore.
  * Feature: the "reuseport" parameter of the "listen" directive.
    Thanks to Yingqi Lu at Intel and Sepherosa Ziehau.
  * Feature: the $upstream_connect_time variable.
  * Bugfix: in the "hash" directive on big-endian platforms.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: in IP address parsing.
    Thanks to Sergey Polovko.
  * Change: obsolete aio and rtsig event methods have been removed.
  * Feature: the "zone" directive inside the "upstream" block.
  * Feature: the stream module.
  * Feature: byte ranges support in the ngx_http_memcached_module.
    Thanks to Martin Mlyná?.
  * Feature: shared memory can now be used on Windows versions with
    address space layout randomization.
    Thanks to Sergey Brester.
  * Feature: the "error_log" directive can now be used on mail and server
    levels in mail proxy.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
- removed patches already present upstream
  * nginx-0.4.0-no_Werror.patch
- refreshed patches
  * nginx-0.6.38-html.patch to nginx-1.10.0-html.patch
  * nginx-0.4.0-no_Werror.patch to nginx-1.10.0-no_Werror.patch
  * merged nginx-1.0.15_docs.patch in nginx-1.10.0-html.patch
- config option with-http_spdy_module is now with-http_v2_module</changelog>
<changelog author="mrueckert@suse.de" date="1463313600">- enable slice and stream module</changelog>
<changelog author="mrueckert@suse.de" date="1463313601">- enable dynamic modules for intree modules. The following modules
  are built as loadable modules now:
  ngx_http_geoip_module.so
  ngx_http_image_filter_module.so
  ngx_http_perl_module.so
  ngx_http_xslt_filter_module.so
  ngx_mail_module.so
  ngx_stream_module.so
  You will have to load those modules with load_module.
  http://nginx.org/en/docs/ngx_core_module.html#load_module
  The correct syntax for this package is:
  [#] For 64bit machines:
  load_module lib64/nginx/modules/ngx_http_geoip_module.so;
  [#] For 32bit machines:
  load_module lib/nginx/modules/ngx_http_geoip_module.so;
  Examples for all the intree modules have been added to the
  default nginx.conf
- patches updated:
  nginx-1.6.1-default_config.patch - added load_module example</changelog>
<changelog author="mrueckert@suse.de" date="1463313602">- improve conditionals
  - merge the 12.2 and 12.1 based conditionals into 1 as both of
    them are out of support now.
  - enable pcre JIT
  - make use if libatomic_ops on Leap</changelog>
<changelog author="mrueckert@suse.de" date="1464782400">- update to 1.10.1 (bsc# 982505)
  Security: a segmentation fault might occur in a worker process
  while writing a specially crafted request body to a temporary
  file (CVE-2016-4450); the bug had appeared in 1.3.9.</changelog>
<changelog author="mrueckert@suse.de" date="1464868800">- in the sysvinit script use the pid file in /var/run</changelog>

</package>

<package pkgid="7f26eeda6f474cf9f78669cad2242c3ca20617a9fabbba7c7855888380dd2d55" name="nginx-debugsource" arch="x86_64">
    <version epoch="0" ver="1.10.1" rel="71.1"/>

<changelog author="i@marguerite.su" date="1408363200">- clean specfile
- fix for x86_64 builds for 11.4-
  * can't build with -fPIE</changelog>
<changelog author="i@marguerite.su" date="1408363201">- update version 1.6.1 stable
  * Security: pipelined commands were not discarded after STARTTLS
    command in SMTP proxy (CVE-2014-3556)
  * Bugfix: the $uri variable might contain garbage when returning
    errors with code 400
  * Bugfix: in the "none" parameter in the "smtp_auth" directive
- drop nginx-1.0.4_default_config.patch
- add nginx-1.6.1-default_config.patch</changelog>
<changelog author="i@marguerite.su" date="1408363202">- disable passenger for 1320 as rubygem-passenger isn't in Factory</changelog>
<changelog author="i@marguerite.su" date="1409918400">- use /run as pid/lock directory on openSUSE Factory (13.2=+)</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 1.6.2 stable
  * Security: it was possible to reuse SSL sessions in unrelated
    contexts if a shared SSL session cache or the same TLS session
    ticket key was used for multiple "server" blocks (CVE-2014-3616).
    Thanks to Antoine Delignat-Lavaud.
  * Bugfix: requests might hang if resolver was used and a DNS server
    returned a malformed response; the bug had appeared in 1.5.8.
  * Bugfix: requests might hang if resolver was used and a timeout
    occurred during a DNS request.</changelog>
<changelog author="vpereirabr@opensuse.org" date="1427284800">- On OpenSUSE 13.2, it requires libGeoIP-devel</changelog>
<changelog author="mrueckert@suse.de" date="1428840000">- update version 1.6.3 stable
  - Feature: now the "tcp_nodelay" directive works with SPDY
    connections.
  - Bugfix: in error handling.  Thanks to Yichun Zhang and Daniil
    Bondarev.
  - Bugfix: alerts "header already sent" appeared in logs if the
    "post_action" directive was used; the bug had appeared in
    1.5.4.
  - Bugfix: alerts "sem_post() failed" might appear in logs.
  - Bugfix: in hash table handling.  Thanks to Chris West.
  - Bugfix: in integer overflow handling.  Thanks to Régis Leroy.
- no longer install the init script when using systemd service file
- create rcnginx for systemd case</changelog>
<changelog author="mrueckert@suse.de" date="1428840001">- enable ngx_http_auth_request_module</changelog>
<changelog author="mrueckert@suse.de" date="1428840002">- disable libatomic-ops on SLE12 for now. the library seems not
  available there.</changelog>
<changelog author="i@marguerite.su" date="1434024000">- update version 1.8.0 stable
  * refer to http://nginx.org/en/CHANGES-1.8 for 1.7.x changes
- enable thread pools invented in nginx 1.7.11
- refactor nginx-1.4.2-passenger_fix.patch
  * rename to nginx-1.4.2-passenger-4.0.18.patch
  * remove zero_in_uri usage
- add patch: nginx-1.8.0-passenger-4.0.18.patch
  * fix "warning: comparison between pointer and integer"
    and "error: invalid type argument of ?-&gt;? (have ?int?)"
- drop nginx-1.4.4-passenger-4.0.33_fix.patch
  * webyast is dead, we only enable passenger on 13.1 and below,
    for compatibility. this patch will never be applied now.
- drop nginx-1.4.4-passenger-3.0.12_fix.patch
  * this patch intended to be applied on &lt; 13.1 machines, but
    13.1 is the oldest one we still have to build against.
- update fancyindex to version 0.3.5</changelog>
<changelog author="mrueckert@suse.de" date="1444996800">- clean up conditionals and use bcond_with* everywhere
- drop passenger support for now
  * drop nginx-1.8.0-passenger-4.0.18.patch
  * drop nginx-1.4.2-passenger-4.0.18.patch</changelog>
<changelog author="mrueckert@suse.de" date="1444996801">- replace custom "kill -QUIT" with the kill signal setting in
  the service file</changelog>
<changelog author="mrueckert@suse.de" date="1444996802">- use libGeoIP-devel everywhere</changelog>
<changelog author="i@marguerite.su" date="1453982400">- update version 1.8.1 stable
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742). boo#963781
  ?* Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746). boo#963778
  ?* Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747). boo#963775
  ?* Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: if nginx was built with the ngx_http_spdy_module it was
    possible to use the SPDY protocol even if the "spdy" parameter of the
    "listen" directive was not specified.</changelog>
<changelog author="dmacvicar@suse.de" date="1462536000">- update to version 1.10.0 stable
  * Bugfix: "recv() failed" errors might occur when using HHVM as a
    FastCGI server.
  * Bugfix: when using HTTP/2 and the "limit_req" or "auth_request"
    directives a timeout or a "client violated flow control" error might
    occur while reading client request body; the bug had appeared in
    1.9.14.
  * Workaround: a response might not be shown by some browsers if HTTP/2
    was used and client request body was not fully read; the bug had
    appeared in 1.9.14.
  * Bugfix: connections might hang when using the "aio threads"
    directive.
    Thanks to Mindaugas Rasiukevicius.
  * Feature: OpenSSL 1.1.0 compatibility.
  * Feature: the "proxy_request_buffering", "fastcgi_request_buffering",
    "scgi_request_buffering", and "uwsgi_request_buffering" directives
    now work with HTTP/2.
  * Bugfix: "zero size buf in output" alerts might appear in logs when
    using HTTP/2.
  * Bugfix: the "client_max_body_size" directive might work incorrectly
    when using HTTP/2.
  * Bugfix: of minor bugs in logging.
  * Change: non-idempotent requests (POST, LOCK, PATCH) are no longer
    passed to the next server by default if a request has been sent to a
    backend; the "non_idempotent" parameter of the "proxy_next_upstream"
    directive explicitly allows retrying such requests.
  * Feature: the ngx_http_perl_module can be built dynamically.
  * Feature: UDP support in the stream module.
  * Feature: the "aio_write" directive.
  * Feature: now cache manager monitors number of elements in caches and
    tries to avoid cache keys zone overflows.
  * Bugfix: "task already active" and "second aio post" alerts might
    appear in logs when using the "sendfile" and "aio" directives with
    subrequests.
  * Bugfix: "zero size buf in output" alerts might appear in logs if
    caching was used and a client closed a connection prematurely.
  * Bugfix: connections with clients might be closed needlessly if
    caching was used.
    Thanks to Justin Li.
  * Bugfix: nginx might hog CPU if the "sendfile" directive was used on
    Linux or Solaris and a file being sent was changed during sending.
  * Bugfix: connections might hang when using the "sendfile" and "aio
    threads" directives.
  * Bugfix: in the "proxy_pass", "fastcgi_pass", "scgi_pass", and
    "uwsgi_pass" directives when using variables.
    Thanks to Piotr Sikora.
  * Bugfix: in the ngx_http_sub_filter_module.
  * Bugfix: if an error occurred in a cached backend connection, the
    request was passed to the next server regardless of the
    proxy_next_upstream directive.
  * Bugfix: "CreateFile() failed" errors when creating temporary files on
    Windows.
  * Feature: Huffman encoding of response headers in HTTP/2.
    Thanks to Vlad Krasnov.
  * Feature: the "worker_cpu_affinity" directive now supports more than
    64 CPUs.
  * Bugfix: compatibility with 3rd party C++ modules; the bug had
    appeared in 1.9.11.
    Thanks to Piotr Sikora.
  * Bugfix: nginx could not be built statically with OpenSSL on Linux;
    the bug had appeared in 1.9.11.
  * Bugfix: the "add_header ... always" directive with an empty value did
    not delete "Last-Modified" and "ETag" header lines from error
    responses.
  * Workaround: "called a function you should not call" and "shutdown
    while in init" messages might appear in logs when using OpenSSL
    1.0.2f.
  * Bugfix: invalid headers might be logged incorrectly.
  * Bugfix: socket leak when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Feature: TCP support in resolver.
  * Feature: dynamic modules.
  * Bugfix: the $request_length variable did not include size of request
    headers when using HTTP/2.
  * Bugfix: in the ngx_http_v2_module.
  * Security: invalid pointer dereference might occur during DNS server
    response processing if the "resolver" directive was used, allowing an
    attacker who is able to forge UDP packets from the DNS server to
    cause segmentation fault in a worker process (CVE-2016-0742).
  * Security: use-after-free condition might occur during CNAME response
    processing if the "resolver" directive was used, allowing an attacker
    who is able to trigger name resolution to cause segmentation fault in
    a worker process, or might have potential other impact
    (CVE-2016-0746).
  * Security: CNAME resolution was insufficiently limited if the
    "resolver" directive was used, allowing an attacker who is able to
    trigger arbitrary name resolution to cause excessive resource
    consumption in worker processes (CVE-2016-0747).
  * Feature: the "auto" parameter of the "worker_cpu_affinity" directive.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work with IPv6 listen sockets.
  * Bugfix: connections to upstream servers might be cached incorrectly
    when using the "keepalive" directive.
  * Bugfix: proxying used the HTTP method of the original request after
    an "X-Accel-Redirect" redirection.
  * Bugfix: proxying to unix domain sockets did not work when using
    variables; the bug had appeared in 1.9.8.
  * Feature: pwritev() support.
  * Feature: the "include" directive inside the "upstream" block.
  * Feature: the ngx_http_slice_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using LibreSSL; the bug had appeared in 1.9.6.
  * Bugfix: nginx could not be built on OS X in some cases.
  * Feature: the "nohostname" parameter of logging to syslog.
  * Feature: the "proxy_cache_convert_head" directive.
  * Feature: the $realip_remote_addr variable in the
    ngx_http_realip_module.
  * Bugfix: the "expires" directive might not work when using variables.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2; the bug had appeared in 1.9.6.
  * Bugfix: if nginx was built with the ngx_http_v2_module it was
    possible to use the HTTP/2 protocol even if the "http2" parameter of
    the "listen" directive was not specified.
  * Bugfix: in the ngx_http_v2_module.
  * Bugfix: a segmentation fault might occur in a worker process when
    using HTTP/2.
    Thanks to Piotr Sikora and Denis Andzakovic.
  * Bugfix: the $server_protocol variable was empty when using HTTP/2.
  * Bugfix: backend SSL connections in the stream module might be timed
    out unexpectedly.
  * Bugfix: a segmentation fault might occur in a worker process if
    different ssl_session_cache settings were used in different virtual
    servers.
  * Bugfix: nginx/Windows could not be built with MinGW gcc; the bug had
    appeared in 1.9.4.
    Thanks to Kouhei Sutou.
  * Bugfix: time was not updated when the timer_resolution directive was
    used on Windows.
  * Miscellaneous minor fixes and improvements.
    Thanks to Markus Linnala, Kurtis Nusbaum and Piotr Sikora.
  * Feature: the ngx_http_v2_module (replaces ngx_http_spdy_module).
    Thanks to Dropbox and Automattic for sponsoring this work.
  * Change: now the "output_buffers" directive uses two buffers by
    default.
  * Change: now nginx limits subrequests recursion, not simultaneous
    subrequests.
  * Change: now nginx checks the whole cache key when returning a
    response from cache.
    Thanks to Gena Makhomed and Sergey Brester.
  * Bugfix: "header already sent" alerts might appear in logs when using
    cache; the bug had appeared in 1.7.5.
  * Bugfix: "writev() failed (4: Interrupted system call)" errors might
    appear in logs when using CephFS and the "timer_resolution" directive
    on Linux.
  * Bugfix: in invalid configurations handling.
    Thanks to Markus Linnala.
  * Bugfix: a segmentation fault occurred in a worker process if the
    "sub_filter" directive was used at http level; the bug had appeared
    in 1.9.4.
  * Change: the "proxy_downstream_buffer" and "proxy_upstream_buffer"
    directives of the stream module are replaced with the
    "proxy_buffer_size" directive.
  * Feature: the "tcp_nodelay" directive in the stream module.
  * Feature: multiple "sub_filter" directives can be used simultaneously.
  * Feature: variables support in the search string of the "sub_filter"
    directive.
  * Workaround: configuration testing might fail under Linux OpenVZ.
    Thanks to Gena Makhomed.
  * Bugfix: old worker processes might hog CPU after reconfiguration with
    a large number of worker_connections.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" and "alias" directives were used inside a location given
    by a regular expression; the bug had appeared in 1.7.1.
  * Bugfix: the "try_files" directive inside a nested location given by a
    regular expression worked incorrectly if the "alias" directive was
    used in the outer location.
  * Bugfix: in hash table initialization error handling.
  * Bugfix: nginx could not be built with Visual Studio 2015.
  * Change: duplicate "http", "mail", and "stream" blocks are now
    disallowed.
  * Feature: connection limiting in the stream module.
  * Feature: data rate limiting in the stream module.
  * Bugfix: the "zone" directive inside the "upstream" block did not work
    on Windows.
  * Bugfix: compatibility with LibreSSL in the stream module.
    Thanks to Piotr Sikora.
  * Bugfix: in the "--builddir" configure parameter.
    Thanks to Piotr Sikora.
  * Bugfix: the "ssl_stapling_file" directive did not work; the bug had
    appeared in 1.9.2.
    Thanks to Faidon Liambotis and Brandon Black.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "ssl_stapling" directive was used; the bug had appeared in 1.9.2.
    Thanks to Matthew Baldwin.
  * Feature: the "backlog" parameter of the "listen" directives of the
    mail proxy and stream modules.
  * Feature: the "allow" and "deny" directives in the stream module.
  * Feature: the "proxy_bind" directive in the stream module.
  * Feature: the "proxy_protocol" directive in the stream module.
  * Feature: the -T switch.
  * Feature: the REQUEST_SCHEME parameter added to the fastcgi.conf,
    fastcgi_params, scgi_params, and uwsgi_params standard configuration
    files.
  * Bugfix: the "reuseport" parameter of the "listen" directive of the
    stream module did not work.
  * Bugfix: OCSP stapling might return an expired OCSP response in some
    cases.
  * Change: now SSLv3 protocol is disabled by default.
  * Change: some long deprecated directives are not supported anymore.
  * Feature: the "reuseport" parameter of the "listen" directive.
    Thanks to Yingqi Lu at Intel and Sepherosa Ziehau.
  * Feature: the $upstream_connect_time variable.
  * Bugfix: in the "hash" directive on big-endian platforms.
  * Bugfix: nginx might fail to start on some old Linux variants; the bug
    had appeared in 1.7.11.
  * Bugfix: in IP address parsing.
    Thanks to Sergey Polovko.
  * Change: obsolete aio and rtsig event methods have been removed.
  * Feature: the "zone" directive inside the "upstream" block.
  * Feature: the stream module.
  * Feature: byte ranges support in the ngx_http_memcached_module.
    Thanks to Martin Mlyná?.
  * Feature: shared memory can now be used on Windows versions with
    address space layout randomization.
    Thanks to Sergey Brester.
  * Feature: the "error_log" directive can now be used on mail and server
    levels in mail proxy.
  * Bugfix: the "proxy_protocol" parameter of the "listen" directive did
    not work if not specified in the first "listen" directive for a
    listen socket.
- removed patches already present upstream
  * nginx-0.4.0-no_Werror.patch
- refreshed patches
  * nginx-0.6.38-html.patch to nginx-1.10.0-html.patch
  * nginx-0.4.0-no_Werror.patch to nginx-1.10.0-no_Werror.patch
  * merged nginx-1.0.15_docs.patch in nginx-1.10.0-html.patch
- config option with-http_spdy_module is now with-http_v2_module</changelog>
<changelog author="mrueckert@suse.de" date="1463313600">- enable slice and stream module</changelog>
<changelog author="mrueckert@suse.de" date="1463313601">- enable dynamic modules for intree modules. The following modules
  are built as loadable modules now:
  ngx_http_geoip_module.so
  ngx_http_image_filter_module.so
  ngx_http_perl_module.so
  ngx_http_xslt_filter_module.so
  ngx_mail_module.so
  ngx_stream_module.so
  You will have to load those modules with load_module.
  http://nginx.org/en/docs/ngx_core_module.html#load_module
  The correct syntax for this package is:
  [#] For 64bit machines:
  load_module lib64/nginx/modules/ngx_http_geoip_module.so;
  [#] For 32bit machines:
  load_module lib/nginx/modules/ngx_http_geoip_module.so;
  Examples for all the intree modules have been added to the
  default nginx.conf
- patches updated:
  nginx-1.6.1-default_config.patch - added load_module example</changelog>
<changelog author="mrueckert@suse.de" date="1463313602">- improve conditionals
  - merge the 12.2 and 12.1 based conditionals into 1 as both of
    them are out of support now.
  - enable pcre JIT
  - make use if libatomic_ops on Leap</changelog>
<changelog author="mrueckert@suse.de" date="1464782400">- update to 1.10.1 (bsc# 982505)
  Security: a segmentation fault might occur in a worker process
  while writing a specially crafted request body to a temporary
  file (CVE-2016-4450); the bug had appeared in 1.3.9.</changelog>
<changelog author="mrueckert@suse.de" date="1464868800">- in the sysvinit script use the pid file in /var/run</changelog>

</package>

</otherdata>