<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="20">
<package pkgid="31d735aab42f7f5ac74a0ab82d2ea66dbdebda099cce83422a68bebb72262bba" name="nginx-mainline" arch="src">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="7ef05ad5efb03e40b1b38f771e9d2100cd668f334d9a66f2e9f398d42884454a" name="nginx-mainline" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="e0cff3302160dc65a8795ddb8f2fe558f8621100df16e4db4d8a2dd846c61088" name="nginx-mainline-all-modules" arch="noarch">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="a061309eb405f6c60dd79625f05275c0fa8e4edff0104f18e695de8170eda294" name="nginx-mainline-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="0876e92c5f2c55554490df4f80907084d3a18d24bf810c85a887c1ada543669c" name="nginx-mainline-debugsource" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="3981cdc82334e1ef98ca04b334ff586a702c96a82c57aa45e83ddc3dfbfcee5c" name="nginx-mainline-filesystem" arch="noarch">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="17f680d4fbfc76328f106491a0625909aa7abadadd99d95b87f0e92c1fb891ef" name="nginx-mainline-mod-http-geoip2" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="36cc4782785413199be1285c57f94023fbdb349fc8b93d1f57488860d23f5dcc" name="nginx-mainline-mod-http-geoip2-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="8c57de0124707328cb711f3f1b357e54f4984ad22abe4f794e75f640d5946e45" name="nginx-mainline-mod-http-image-filter" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="c471a996adc1c6d38190addec50d1fe48ea8fd59d1f2da9330a56716944c010c" name="nginx-mainline-mod-http-image-filter-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="deb3a628467e6f3e6a8bc593713f5544ce7dbeec95c270f99029db55a70d923c" name="nginx-mainline-mod-http-perl" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="5640635fa611ec055e21e6a630af9266805af554cf012c8c590ff1c932297a57" name="nginx-mainline-mod-http-perl-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="1c0d111aba6d1c985127a99737190595994de5619ef8982be33795c9f747c492" name="nginx-mainline-mod-http-xslt-filter" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="1a7d9a44c91500400aa7934eb9eef8c3678e697ff168b9121f8f1dc3e2830308" name="nginx-mainline-mod-http-xslt-filter-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="43765038b3f564b22ef1d89d4f5e80c57fb12297d32c43c639a00be71285eb73" name="nginx-mainline-mod-mail" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="db761abf13e765c125147a82bea1d59dfc21c73f1e5e63e0dd43fa0d9061d51d" name="nginx-mainline-mod-mail-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="aec42ac213642085fc2959a3d8b75fdfee171544c40c774b0d04e753bd495b4d" name="nginx-mainline-mod-stream" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="3e23d652b550df697a8d7fea1efa19e1bc8529316a0ebd227f24e9ea7bfea2af" name="nginx-mainline-mod-stream-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="4d552f74226b61f18057ccc1fd9a1b942071dfa0854fb369efdc49ec6eceb71c" name="nginx-mainline-mod-stream-geoip2" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
<package pkgid="1ac15ac0bc5253764b675bd70cb58353750b1eecdfd4c28b1df4c0a503a4cf27" name="nginx-mainline-mod-stream-geoip2-debuginfo" arch="x86_64">
  <version epoch="3" ver="1.31.1" rel="1.fc45"/>
  <changelog author="lotke - 1:1.29.5-3" date="1771934400">- Modernize spec to match Fedora patterns
- Switch to pcre2-devel and zlib-ng-devel
- Add HTTP/3 QUIC support (--with-http_v3_module)
- Enable kTLS (--with-openssl-opt=enable-ktls)
- Add stream_realip_module
- Switch to sysusers.d for nginx user/group creation
- Use systemd-rpm-macros and %{?systemd_requires}
- Use SPDX license identifier (BSD-2-Clause)
- Make GeoIP fully conditional and dynamic
- Move log directory to filesystem subpackage with %attr(711,root,root)
- Add %ghost entries for access.log and error.log
- Remove dead RHEL 7 code
- Remove explicit Requires on openssl and pcre (auto-detected)</changelog>
  <changelog author="lotke - 1:1.29.5-4" date="1777032000">- Replace legacy GeoIP with GeoIP2 (leev/ngx_http_geoip2_module 3.4)
- BuildRequires libmaxminddb-devel instead of GeoIP-devel
- Subpackages: nginx-mod-http-geoip2 and nginx-mod-stream-geoip2
  (module ships both http and stream flavors)
- GeoIP2 enabled by default (%bcond_without geoip2)
- Uses MaxMind MMDB format (GeoLite2/GeoIP2), legacy GeoIP DBs retired 2022</changelog>
  <changelog author="lotke - 1:1.29.8-1" date="1777032001">- Update to upstream mainline 1.29.8 (signed by pluknet)</changelog>
  <changelog author="lotke - 1:1.31.0-1" date="1778673600">- Update to upstream mainline 1.31.0 (signed by pluknet)
- Security: fixes CVE-2026-42945 (heap buffer overflow in
  ngx_http_rewrite_module, potential RCE), CVE-2026-42926 (HTTP/2
  proxy_set_body request injection), CVE-2026-42946 (scgi/uwsgi
  heap buffer overread), CVE-2026-42934 (UTF-8 charset_map heap
  buffer overread), CVE-2026-40460 (HTTP/3 connection-migration
  address spoofing), CVE-2026-40701 (use-after-free in resolver
  during DNS response processing with ssl_ocsp)</changelog>
  <changelog author="lotke - 1:1.31.0-2" date="1778673601">- Fix dependency resolution: add unprefixed Provides for
  nginx-mod-{http-image-filter,http-perl,http-xslt-filter,mail,stream}
  to match Fedora module-naming convention. Without these, the
  -all-modules meta package and mod-stream-geoip2 (which Require
  the unprefixed names) failed to resolve at install time.</changelog>
  <changelog author="lotke - 1:1.31.0-3" date="1778673602">- Add Obsoletes for stock Fedora nginx and module packages so
  dnf treats nginx-mainline as a seamless replacement. Without
  these, swapping required --allowerasing because Conflicts +
  Provides alone don't tell dnf one supersedes the other. Now
  the main package Obsoletes nginx, filesystem Obsoletes
  nginx-filesystem, and each module subpackage Obsoletes the
  corresponding stock nginx-mod-* (file paths in /usr/lib64/
  nginx/modules/*.so overlap with stock, so this was needed for
  module subpackages too).</changelog>
  <changelog author="lotke - 3:1.31.0-4" date="1778760000">- Bump Epoch from 1 to 3 so it outranks Fedora's stock nginx
  packages (Epoch 2). Without this, our Obsoletes: nginx-* &lt;
  %{epoch}:%{version}-%{release} evaluated to "&lt; 1:..." which
  never matches an installed "2:..." (RPM compares Epoch first),
  so dnf could not auto-replace stock nginx-filesystem etc.
  Reported by users updating older nginx-mainline (1:1.29.x) on
  Fedora 42 where stock nginx-filesystem-2:1.28.1 was installed.</changelog>
  <changelog author="lotke - 3:1.31.1-1" date="1779537600">- Update to upstream mainline 1.31.1 (signed by pluknet)
- Security: fixes CVE-2026-9256 (heap buffer overflow in
  ngx_http_rewrite_module triggered by configurations with
  overlapping captures, potential RCE)</changelog>
</package>
</otherdata>