Brotli was rejected for inclusion in Ubuntu NGINX after discussion with the Security Team. This was discussed in https://answers.launchpad.net/ubuntu/+source/nginx/+question/678209 There has been no movement in Security Team concerns or any effort to fix a variant of BREACH that is still present in Brotli compression, therefore Brotli remains rejected for inclusion under the same reasoning that was provided back in January.
zstd has not been vetted yet. This requires Security team consultation before it can be continued. Per Bug Processing guidelines I am setting this bug as "New" and "Wishlist" importance. ** Changed in: nginx (Ubuntu) Importance: Undecided => Wishlist ** Summary changed: - Add Brotli and Zstd compression modules + Add Zstd compression module ** Description changed: These two modules are now pretty mainstream and should be available within Ubuntu repo (e.g. nginx-extras line): https://github.com/tokers/zstd-nginx-module - https://github.com/google/ngx_brotli + + https://github.com/google/ngx_brotli (REJECTED, see comments --teward) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1829383 Title: Add Zstd compression module To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1829383/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
