• Feature: the "auth_delay" directive.
• Change: now nginx does not allow several "Host" request header lines.
• Bugfix: nginx ignored additional "Transfer-Encoding" request header lines.
• Bugfix: socket leak when using HTTP/2.
• Bugfix: a segmentation fault might occur in a worker process if OCSP stapling was used.
• Bugfix: in the ngx_http_mp4_module.
• Bugfix: nginx used status code 494 instead of 400 if errors with code 494 were redirected with the "error_page" directive.
• Bugfix: socket leak when using subrequests in the njs module and the "aio" directive.

Package changes:

• Make it stateless
• Show a welcome website when no sites are available
• Load config files from /etc/nginx/conf.d/ and /etc/nginx/sites-enabled/

Fixes T4780.

1. With sites-available empty, welcome website is shown
2. sudo touch /etc/nginx/sites-available/test
3. Reboot nginx. Error 404 is shown on localhost, i.e. it's not loading welcome.conf anymore as expected
4. sudo cp /usr/share/nginx/welcome.conf /etc/nginx/sites-enabled; sudo rm /tmp/nginx.conf
5. Reboot nginx. Welcome website is shown as expected