Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
78 changes: 0 additions & 78 deletions SPECS/nginx/CVE-2024-7347.patch

This file was deleted.

72 changes: 0 additions & 72 deletions SPECS/nginx/CVE-2025-23419.patch

This file was deleted.

4 changes: 2 additions & 2 deletions SPECS/nginx/nginx.signatures.json
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"Signatures": {
"nginx-1.25.4.tar.gz": "760729901acbaa517996e681ee6ea259032985e37c2768beef80df3a877deed9",
"nginx-njs-0.8.3.tar.gz": "5e1341ee8c1dfce420ea6456475dafa7d5f4b9aed310faca32597cf4d221cfe0",
"nginx-1.28.0.tar.gz": "c6b5c6b086c0df9d3ca3ff5e084c1d0ef909e6038279c71c1c3e985f576ff76a",
"nginx-njs-0.9.3.tar.gz": "a1ad089a52ebd295489443faea3089d12df414f5da624446d6c2bf7d99ec36cb",
"nginx-tests.tgz": "5847fdc454543df77e07026e7de737f9e7ff093c8ce4afcbc2093a64e570ff83",
"nginx.service": "73a1321ae35eafc4e02614cde224fc0bf20ceba97f969b3373dd73c15c22a0e1"
}
Expand Down
13 changes: 7 additions & 6 deletions SPECS/nginx/nginx.spec
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
%global nginx_user nginx
%global njs_version 0.8.3
%global njs_version 0.9.3

Summary: High-performance HTTP server and reverse proxy
Name: nginx
# Currently on "stable" version of nginx from https://nginx.org/en/download.html.
# Note: Stable versions are even (1.20), mainline versions are odd (1.21)
Version: 1.25.4
Release: 6%{?dist}
Version: 1.28.0
Release: 1%{?dist}
License: BSD-2-Clause
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -20,9 +20,7 @@ Source2: https://github.com/nginx/njs/archive/refs/tags/%{njs_version}.ta
Source3: nginx-tests.tgz
%endif

Patch0: CVE-2024-7347.patch
Patch1: CVE-2025-23419.patch
Patch2: CVE-2025-53859.patch
Patch1: CVE-2025-53859.patch
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you please also check if the upstream patches from Fedora which includes few optimizations, for e.g., 0005-Compile-perl-module-with-O2.patch can be included with this? Also, please check rpm logs once, few warnings are there including obsolete configure option --with-ipv6.

BuildRequires: libxml2-devel
BuildRequires: libxslt-devel
BuildRequires: openssl-devel
Expand Down Expand Up @@ -165,6 +163,9 @@ rm -rf nginx-tests
%dir %{_sysconfdir}/%{name}

%changelog
* Thu Oct 23 2025 Sandeep Karambelkar <[email protected]> - 1.28.0-1
- Upgrade to 1.28.0 Upstream Stable Version

* Tue Sep 09 2025 Mayank Singh <[email protected]> - 1.25.4-6
- Enable stream ssl preread module

Expand Down
4 changes: 2 additions & 2 deletions cgmanifest.json
Original file line number Diff line number Diff line change
Expand Up @@ -14372,8 +14372,8 @@
"type": "other",
"other": {
"name": "nginx",
"version": "1.25.4",
"downloadUrl": "https://nginx.org/download/nginx-1.25.4.tar.gz"
"version": "1.28.0",
"downloadUrl": "https://nginx.org/download/nginx-1.28.0.tar.gz"
}
}
},
Expand Down
Loading