<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="8">
<package pkgid="6ad291ebe6672ad21ff579910b9d79a2a94e76a2349ef1e9acf91c841678a6c8" name="nginx" arch="x86_64">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
<package pkgid="103a7fb5adb73f769753df98fe62dec9e64204c320d79875792109ffa09345bb" name="nginx-all-modules" arch="noarch">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
<package pkgid="3fcb2b78a8a9a7d8e73219d211f38c8bfff923cbbc21e3ec35ec859ac90abec0" name="nginx-filesystem" arch="noarch">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
<package pkgid="0c0f2637828af6128470dca6b3e2a7dcb2db3bbb7206a40b63f062e296ef61c3" name="nginx-mod-http-image-filter" arch="x86_64">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
<package pkgid="5f771e772a5ee75bec87ff884d64ec142166e4c52d4dc8072b34058695d1f5b3" name="nginx-mod-http-perl" arch="x86_64">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
<package pkgid="5507f57853386c046e219528efb6b80e67d5ac32fd5e91f350ddc34e84082b86" name="nginx-mod-http-xslt-filter" arch="x86_64">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
<package pkgid="de6fafd02aa720d46e930c662ee0e9bd9d71144199f2d3e3202ea5b689a3b669" name="nginx-mod-mail" arch="x86_64">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
<package pkgid="8ce4ec291033992bec84bd53d74cc39270d610bf458b0eb223b2121d7bd3e0a2" name="nginx-mod-stream" arch="x86_64">
  <version epoch="1" ver="1.16.1" rel="2.module+el8.4.0+11155+68135136.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.0-3" date="1533729600">- fix PKCS#11 support (Anderson Sasaki, #1545526)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-1" date="1542628800">- new version 1.14.1
- Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
  memory disclosure via mp4 module
- Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
  via flaw in HTTP/2 implementation
- Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
  via flaw in HTTP/2 implementation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-2" date="1543838400">- Resolves: #1655530 - Hardening tests fail for nginx</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1:1.14.1-3" date="1544529600">- fix unexpanded paths in nginx(8) (#1643069)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.14.1-8" date="1544616000">- enable TLS 1.3 by default (#1643647)
- TLSv1.0 and TLSv1.1 can be enabled now (#1644746)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-1" date="1557144000">- new version 1.16.0
- enable ngx_stream_ssl_preread module
- main package does NOT require all-modules package</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.0-2" date="1561550400">- Resolves: #1718929 - ssl_protocols config option has faulty behavior
  in nginx:1.16</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-1" date="1567080000">- update to 1.16.1
- Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
  headers leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2" date="1606132800">- Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
  via error pages in http/ngx_http_special_response.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:1.16.1-2.1" date="1621944000">- Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
  ngx_resolver_copy() when labels are followed by a pointer to a root
  domain name</changelog>
</package>
</otherdata>