{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 14, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Fix log permissions issue\n\n----\n\n# nginx 1.20.1 for EPEL 7\n## Changes\n\n### Log file ownership (potential user impact)\n**Note** that the ownership of log files has changed to `root:root` and the mode changed to `700` (from `770`) to address CVE-2016-1247. This should not affect general operation, as this is the default for log directories and also what httpd uses but if you use external tools to process the log files you may want to check continued operation after this update.\n\n### OpenSSL 1.1\nnginx in EPEL 7 is now built against OpenSSL 1.1 to allow the use of TLSv1.3.\n\n### Default Config changes\nDropped `default_server` and `location /` directives so that it can be overridden in `conf.d` without needing to touch the default config. Note that the first `server` (as defined in the default config) and `root` will continue to serve the default `index.html` as long as no other `server` is defined.\n\n### Logrotate\nnginx now handles creation of new log files to ensure correct permissions.\n\n### Installation\nnginx no longer requires `nginx-all-modules` to allow for a leaner install.\n\n### Service start\nThe systemd unit will now wait for the `network-online.target`. Previously, start up could fail if DNS names were used for some config options (such as `proxy_pass`) and these names were not resolvable at service start time.\n\n### Service reload\nThe systemd unit now uses `nginx -s` to only reload the service if the configuration is valid. In previous versions an invalid configuration could take down nginx upon reload.\n\nPlease consult http://nginx.org/en/CHANGES-1.20 for all changes to nginx since the current EPEL 7 release of 1.16.1.\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2021-06-02 00:26:36", "date_modified": null, "date_approved": null, "date_testing": "2021-06-03 01:11:03", "date_stable": "2021-06-18 00:31:25", "alias": "FEDORA-EPEL-2021-8c50b78c57", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2021-06-18 00:31:25", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-8c50b78c57", "title": "nginx-1.20.1-2.el7", "version_hash": "8dde49b8270dee1687802873b976fabae7b11d2a", "release": {"name": "EPEL-7", "long_name": "Fedora EPEL 7", "version": "7", "id_prefix": "FEDORA-EPEL", "branch": "epel7", "dist_tag": "epel7", "stable_tag": "epel7", "testing_tag": "epel7-testing", "candidate_tag": "epel7-testing-candidate", "pending_signing_tag": "epel7-signing-pending", "pending_testing_tag": "epel7-testing-pending", "pending_stable_tag": "epel7-pending", "override_tag": "epel7-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "setting_status": null}, "user": {"name": "heffer", "email": "felix@kaechele.ca", "id": 451, "avatar": "https://seccdn.libravatar.org/avatar/8e3060cd6a1c2ba2cd1f8f02254a3f3c6ee1ed9e5758cdaf9afc26bcf88758b4?s=24&d=retro", "openid": "heffer.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by heffer. ", "timestamp": "2021-06-02 00:26:37", "update_id": 309637, "user_id": 91, "id": 2051315, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-06-02 00:26:37", "update_id": 309637, "user_id": 91, "id": 2051316, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2021-06-02 00:26:37", "update_id": 309637, "user_id": 91, "id": 2051317, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [nginx-1.20.1-1.el7](https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c64b965c33), and has inherited its bugs and notes.", "timestamp": "2021-06-02 00:26:40", "update_id": 309637, "user_id": 91, "id": 2051324, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-06-02 01:05:23", "update_id": 309637, "user_id": 91, "id": 2051436, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-06-03 01:11:10", "update_id": 309637, "user_id": 91, "id": 2053703, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2021-06-17 01:13:04", "update_id": 309637, "user_id": 91, "id": 2090787, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2021-06-18 00:31:34", "update_id": 309637, "user_id": 91, "id": 2092078, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "nginx-1.20.1-2.el7", "signed": true, "release_id": 8, "type": "rpm", "epoch": 1}], "bugs": [{"bug_id": 1964821, "title": "CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name [epel-7]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1966367, "title": "nginx doesn't reopen the log file", "security": false, "parent": false, "feedback": []}], "updateid": "FEDORA-EPEL-2021-8c50b78c57", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}