[ubuntu/oracular-proposed] nginx 1.26.0-2ubuntu1 (Accepted)

[Gianfranco Costamagna]

nginx (1.26.0-2ubuntu1) oracular; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Branding for Ubuntu
      + d/p/ubuntu-branding.patch: add Ubuntu branding
      + d/t/branding: Add autopkgtest to validate branding presence
    - d/control: Drop the Lua module (libnginx-mod-http-lua) as a
      dependency for NGINX (Server Team Decision) - future support
      for Lua module now requires resty-core from OpenResty, meaning that if
      we want to continue to support the Lua module, we have to start becoming
      OpenResty - users should just use OpenResty at this point for Lua.
    - d/control: let nginx-core depend on geoip2 instead of geoip.
    - d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too

nginx (1.26.0-2) unstable; urgency=medium

  [ Jan Mojžíš ]
  * d/rules: enable QUIC and HTTP/3 module (Closes: 1070488)
  * d/control: bump Standards-Version: 4.7.0, no changes
  * d/p/nginx-1.26.1.patch add, backport changes from the nginx 1.26.1 and fix
    CVE-2024-32760, CVE-2024-31079, CVE-2024-35200, CVE-2024-34161
  * d/p/CVE-2024-7347.patch add, backport CVE-2024-7347 fix (Closes: 1078971)
  * d/libnginx-mod.abisubstvars updated comment when ABI needs to be changed

  [ Thomas Ward ]
  * d/conf/nginx.conf: Update default options for current security
    practices and standards. SSL protos, disable prefer server
    ciphers, hide server tokens/versions in responses.

Date: Tue, 03 Sep 2024 20:14:02 +0200
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers at alioth-lists.debian.net>
https://launchpad.net/ubuntu/+source/nginx/1.26.0-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 03 Sep 2024 20:14:02 +0200
Source: nginx
Built-For-Profiles: noudeb
Architecture: source
Version: 1.26.0-2ubuntu1
Distribution: oracular
Urgency: medium
Maintainer: Debian Nginx Maintainers <pkg-nginx-maintainers at alioth-lists.debian.net>
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Closes: 1070488 1078971
Changes:
 nginx (1.26.0-2ubuntu1) oracular; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     - Branding for Ubuntu
       + d/p/ubuntu-branding.patch: add Ubuntu branding
       + d/t/branding: Add autopkgtest to validate branding presence
     - d/control: Drop the Lua module (libnginx-mod-http-lua) as a
       dependency for NGINX (Server Team Decision) - future support
       for Lua module now requires resty-core from OpenResty, meaning that if
       we want to continue to support the Lua module, we have to start becoming
       OpenResty - users should just use OpenResty at this point for Lua.
     - d/control: let nginx-core depend on geoip2 instead of geoip.
     - d/t/control: Drop autopkgtest dependencies on libnginx-mod-http-lua too
 .
 nginx (1.26.0-2) unstable; urgency=medium
 .
   [ Jan Mojžíš ]
   * d/rules: enable QUIC and HTTP/3 module (Closes: 1070488)
   * d/control: bump Standards-Version: 4.7.0, no changes
   * d/p/nginx-1.26.1.patch add, backport changes from the nginx 1.26.1 and fix
     CVE-2024-32760, CVE-2024-31079, CVE-2024-35200, CVE-2024-34161
   * d/p/CVE-2024-7347.patch add, backport CVE-2024-7347 fix (Closes: 1078971)
   * d/libnginx-mod.abisubstvars updated comment when ABI needs to be changed
 .
   [ Thomas Ward ]
   * d/conf/nginx.conf: Update default options for current security
     practices and standards. SSL protos, disable prefer server
     ciphers, hide server tokens/versions in responses.
Checksums-Sha1:
 29bcfde19236e380b562f6b1a2a25eb7d4f2d203 3530 nginx_1.26.0-2ubuntu1.dsc
 af423c11ef722a0a53c8ca6029d025ed603a6988 86972 nginx_1.26.0-2ubuntu1.debian.tar.xz
 30732a104a19b6ff24678044dbd23df78cd68664 8448 nginx_1.26.0-2ubuntu1_source.buildinfo
Checksums-Sha256:
 ff63735cd61287edc0c457ef2d7ea0d9884891e9812aa03a027e09124f489119 3530 nginx_1.26.0-2ubuntu1.dsc
 9cfcc7e9361781a1063109d974b79ac490a24bf052cdd6e1ece77975fd5a681c 86972 nginx_1.26.0-2ubuntu1.debian.tar.xz
 b5f91bde807a1a8c020e37e5f92ff1f4d724960ebd1fdf345874f3e87066de5c 8448 nginx_1.26.0-2ubuntu1_source.buildinfo
Files:
 0a36134911a39a8c7e9027da27419e48 3530 httpd optional nginx_1.26.0-2ubuntu1.dsc
 d4783df82f0bb8842a237556e4fef8e2 86972 httpd optional nginx_1.26.0-2ubuntu1.debian.tar.xz
 a021469a9b857bcf9671b4824a53b341 8448 httpd optional nginx_1.26.0-2ubuntu1_source.buildinfo