# changelog

author: Igor Ippolitov <iippolitov@nginx.com> - 23-1.el9.ngx
changelog:
  - based on nginx/1.19.5 mainline version.
  - Feature: the -e switch.
  - Feature: the same source files can now be specified in different modules
    while building addon modules.
  - Bugfix: SSL shutdown did not work when lingering close was used.
  - Bugfix: "upstream sent frame for closed stream" errors might occur when
    working with gRPC backends.
  - Bugfix: in request body filters internal API.


author: Igor Ippolitov <iippolitov@nginx.com> - 24-1.el9.ngx
changelog:
  - based on nginx/1.19.10 mainline version.
  - the default value of the "keepalive_requests" directive was changed to
    1000.
  - Feature: the "keepalive_time" directive.
  - Feature: the $connection_time variable.
  - Workaround: "gzip filter failed to use preallocated memory" alerts
    appeared in logs when using zlib-ng.


author: Alexey Senin <asenin@nginx.com> - 25-1.el9.ngx
changelog:
  - based on nginx/1.21.3 mainline version.
  - JWT authentication: ∗ support for signed and then encrypted Nested JWT
    with the nested parameter of the auth jwt type directive ∗ additional
    conditions for JWT validation can be specified with the auth jwt require
    directive ∗ the $jwt payload variable that returns either enclosed JWS
    token for Nested JWT, or JSON with claims for JWE ∗ multiple sources of
    JSON Web Key Sets can be specified in auth jwt key file and auth jwt key
    request directives ∗ asymmetric RSA-OAEP cryptographic algorithms for JWE
  - API version 7: HTTP status code statistics are now collected per-code, in
    addition to aggregation per-class, for upstreams, server zones, and
    location zones.
  - stream health checks: introduced the persistent parameter of the health
    check directive that enables persistence to mandatory health checks after
    reload.
  - TCP Fast Open support with the fastopen parameter of the listen directive
    in the stream module.
  - mail proxy: ∗ the number of errors before closing the connection can be
    specified with the max errors directive to mitigate against ALPACA attack
    ∗ support for POP3 and IMAP pipelining ∗ the Auth-SSL-Protocol and
    Auth-SSL-Cipher header lines are now passed to the mail proxy
    authentication server
  - Security hardening of HTTP request parsing. NGINX Plus will return an
    error if: ∗ spaces or control characters are found in the request line,
    header names, or the Host request header line ∗ the CONNECT method is used
    ∗ both Content-Length and Transfer-Encoding header lines are present in
    the request
  - request body filters API now permits buffering of the data being
    processed.
  - added support for dynamic SSL certificate loading for http, grpc and uwsgi
    backends.


author: Nginx Packaging <nginx-packaging@f5.com> - 26-1.el9.ngx
changelog:
  - based on nginx/1.21.5 mainline version.
  - JWT key caching with the auth jwt key cache directive
  - Enhanced ALPN support with the ssl alpn directive for stream, and the
    $ssl_alpn_protocol variable for HTTP and stream
  - The $ssl curve variable that returns the negotiated curve used for SSL
    handshake key exchange process
  - The proxy half close directive for stream that allows closing one side of
    a connection while the data is still transmitted
  - The mp4 start key frame directive in the MP4 module that forces a video to
    always start with a key frame


author: Nginx Packaging <nginx-packaging@f5.com> - 26-2.el9.ngx
changelog:
  - In HLS (CVE-2022-41743) and MP4 (CVE-2022-41741) modules when processing
    specially crafted video files a memory corruption, or a memory disclosure
    in MP4 module (CVE-2022-41742) could happen.


author: Igor Ippolitov <iippolitov@nginx.com> - 22+1.3.1-1.el9.ngx
changelog:
  - Version update to 1.3.1
  - main.js removed
  - Improvement: Add worker process memory usage stats.
  - Improvement: Change usage of js_include to js_import.


