[Pkg-nginx-maintainers] Bug#986787: (no subject)

[Thomas Ward]

Just for awareness: the canonical upstream repository *is* the OpenResty 
lua-nginx-module repository you've linked.

However, keep in mind that there is a new dependency that the Lua module 
will need going forward for Debian - `resty-core` which pulls in a ton 
of extra OpenResty code which is necessary for the Lua module to work in 
the latest versions.

While this is a security bug, and the upstream repository is properly 
identified, you should keep in mind that any Lua module beyond version 
0.10.15 will no longer work without the lua-resty-core library, which is 
not currently packaged. Downstream in Ubuntu, we decided that having to 
pull in the resty core libraries just to use Lua module was 'too much 
additional dependencies' for Ubuntu to maintain, so we yanked it from 
Hirsute (the currently in development release that will be 21.04) going 
forward and are pointing users who still need the Lua module to use 
OpenResty's NGINX variant instead.

In order for this to be fixed, unless you nitpick the specific patch, 
you will need to pull in lua-resty-core as an additional package and 
dependency for the Lua module in order for this to work.


Thomas