o) www/nginx from 1.4.0 to 1.4.1;
o) www/nginx-devel from 1.4.0 to 1.5.0.
<ChangeLog>
*) Security: a stack-based buffer overflow might occur in a worker
process while handling a specially crafted request, potentially
resulting in arbitrary code execution (CVE-2013-2028); the bug had
appeared in 1.3.9.
Thanks to Greg MacManus, iSIGHT Partners Labs.
</ChangeLog>
o) echo from 0.42 to 0.45;
o) headers_more from 0.19 to 0.20;
o) push_stream from 0.3.4 to 03.5;
o) upsteam_sticky from 1.0 to 1.1;
o) encrypted_session from 0.02 to 0.03;
o) lua from 0.7.15 to 0.7.21;
o) redis2 from 0.09 to 0.10;
o) rtmp from 0.9.13 to 0.9.18;
o) srcache from 0.19 to 0.20;
o) iconv from 0.10rc7 to 0.10;
Submitted by: delphij via private mail
Merge changes from www/nginx-devel to www/nginx.
<ChangeLog>
*) Bugfix: nginx could not be built with the ngx_http_perl_module if the
--with-openssl option was used; the bug had appeared in 1.3.16.
*) Bugfix: in a request body handling in the ngx_http_perl_module; the
bug had appeared in 1.3.9.
</ChangeLog>
Approved by: portmgr (bapt)
<ChangeLog>
*) Bugfix: new sessions were not always stored if the "ssl_session_cache
shared" directive was used and there was no free space in shared
memory.
Thanks to Piotr Sikora.
*) Bugfix: responses might hang if subrequests were used and a DNS error
happened during subrequest processing.
Thanks to Lanshun Zhou.
*) Bugfix: in the ngx_http_mp4_module.
Thanks to Gernot Vormayr.
*) Bugfix: in backend usage accounting.
</ChangeLog>
Do not bump PORTREVISION.
<ChangeLog>
* Fix compatibility with nginx-1.1.12+.
Due to the changes in cache index usage accounting (1 per request
instead of 1 per access) initial cache insert of "small" file was
decreasing usage count, rendering index entry invalid.
Because cache manager ignores invalid entries, expired cache files
were not being removed from the cache, which forced it to outgrow
specified "max_size" value.
</ChangeLog>
o) echo from 0.41 to 0.42;
o) headers_more from 0.18 to 0.19;
o) lua from 0.6.10 to 0.7.15;
o) srcache from 0.16 to 0.19;
o) forminput from 0.07rc5 to 0.07.
<ChangeLog>
*) Change: now if the "include" directive with mask is used on Unix
systems, included files are sorted in alphabetical order.
*) Change: the "add_header" directive adds headers to 201 responses.
*) Feature: the "geo" directive now supports IPv6 addresses in CIDR
notation.
*) Feature: the "flush" and "gzip" parameters of the "access_log"
directive.
*) Feature: variables support in the "auth_basic" directive.
*) Feature: the $pipe, $request_length, $time_iso8601, and $time_local
variables can now be used not only in the "log_format" directive.
Thanks to Kiril Kalchev.
*) Feature: IPv6 support in the ngx_http_geoip_module.
Thanks to Gregor Kaliе║nik.
*) Bugfix: nginx could not be built with the ngx_http_perl_module in
some cases.
*) Bugfix: a segmentation fault might occur in a worker process if the
ngx_http_xslt_module was used.
*) Bugfix: nginx could not be built on MacOSX in some cases.
Thanks to Piotr Sikora.
*) Bugfix: the "limit_rate" directive with high rates might result in
truncated responses on 32-bit platforms.
Thanks to Alexey Antropov.
*) Bugfix: a segmentation fault might occur in a worker process if the
"if" directive was used.
Thanks to Piotr Sikora.
*) Bugfix: a "100 Continue" response was issued with "413 Request Entity
Too Large" responses.
*) Bugfix: the "image_filter", "image_filter_jpeg_quality" and
"image_filter_sharpen" directives might be inherited incorrectly.
Thanks to Ian Babrou.
*) Bugfix: "crypt_r() failed" errors might appear if the "auth_basic"
directive was used on Linux.
*) Bugfix: in backup servers handling.
Thanks to Thomas Chen.
*) Bugfix: proxied HEAD requests might return incorrect response if the
"gzip" directive was used.
*) Bugfix: a segmentation fault occurred on start or during
reconfiguration if the "keepalive" directive was specified more than
once in a single upstream block.
*) Bugfix: in the "proxy_method" directive.
*) Bugfix: a segmentation fault might occur in a worker process if
resolver was used with the poll method.
*) Bugfix: nginx might hog CPU during SSL handshake with a backend if
the select, poll, or /dev/poll methods were used.
*) Bugfix: the "[crit] SSL_write() failed (SSL:)" error.
*) Bugfix: in the "fastcgi_keep_conn" directive.
</ChangeLog>
USE_NGINX_DEVEL_KIT internal knob has been deprecated.
Fix third-party modules build by change configure order.
Fix build with iconv third-party module. (*)
Do not bump PORTREVISION.
PR: 175862 (*)
o) www/rubygem-passenger;
o) third-party passenger module for www/nginx and www/nginx-devel.
<Changes>
Release 3.0.19
--------------
* Nginx security fix: do not display Nginx version when
server_tokens are off.
* Fixed compilation problems on some systems.
* Fixed some Union Station-related bugs.
Release 3.0.18
--------------
* Fixed compilation problems on Fedora 17.
* Fixed Union Station compatibility with Rails 3.2.
* Phusion Passenger Enterprise Standalone now supports rolling
restarts and deployment error resistance.
</Changes>
<ChangeLog>
*) Feature: the $request_time and $msec variables can now be used not
only in the "log_format" directive.
*) Bugfix: cache manager and cache loader processes might not be able to
start if more than 512 listen sockets were used.
*) Bugfix: in the ngx_http_dav_module.
</ChangeLog>
Feature safe: yes
<ChangeLog>
*) Feature: the "optional_no_ca" parameter of the "ssl_verify_client"
directive.
Thanks to Mike Kazantsev and Eric O'Connor.
*) Feature: the $bytes_sent, $connection, and $connection_requests
variables can now be used not only in the "log_format" directive.
Thanks to Benjamin Grц╤ssing.
*) Feature: resolver now randomly rotates addresses returned from cache.
Thanks to Anton Jouline.
*) Feature: the "auto" parameter of the "worker_processes" directive.
*) Bugfix: "cache file ... has md5 collision" alert.
*) Bugfix: OpenSSL 0.9.7 compatibility.
</ChangeLog>
o) drizzle - from 0.1.2 to 0.1.4;
o) lua - from 0.5.14 to 0.6.10;
o) redis2 - from 0.08rc4 to 0.09;
o) rtmp - from 0.2.3 to 0.6.1;
o) srcache - from 0.14 to 0.16.
Convert header to modern manner.
Feature safe: yes
<ChangeLog>
*) Bugfix: in the "limit_req" directive; the bug had appeared in 1.1.14.
Thanks to Charles Chen.
*) Bugfix: nginx could not be built by gcc 4.7 with -O2 optimization if
the --with-ipv6 option was used.
*) Bugfix: a segmentation fault might occur in a worker process if the
"map" directive was used with variables as values.
*) Bugfix: a segmentation fault might occur in a worker process if the
"geo" directive was used with the "ranges" parameter but without the
"default" parameter; the bug had appeared in 0.8.43.
Thanks to Zhen Chen and Weibin Yao.
*) Bugfix: in the -p command-line parameter handling.
*) Bugfix: in the mail proxy server.
*) Bugfix: of minor potential bugs.
Thanks to Coverity.
*) Bugfix: nginx/Windows could not be built with Visual Studio 2005
Express.
Thanks to HAYASHI Kentaro.
</ChangeLog>
<ChangeLog>
*) Feature: the Clang compiler support.
*) Bugfix: extra listening sockets might be created.
Thanks to Roman Odaisky.
*) Bugfix: nginx/Windows might hog CPU if a worker process failed to
start.
Thanks to Ricardo Villalobos Guevara.
*) Bugfix: the "proxy_pass_header", "fastcgi_pass_header",
"scgi_pass_header", "uwsgi_pass_header", "proxy_hide_header",
"fastcgi_hide_header", "scgi_hide_header", and "uwsgi_hide_header"
directives might be inherited incorrectly.
*) Bugfix: trailing dot in a source value was not ignored if the "map"
directive was used with the "hostnames" parameter.
*) Bugfix: incorrect location might be used to process a request if a
URI was changed via a "rewrite" directive before an internal redirect
to a named location.
</ChangeLog>
o) third-party rtmp module from 0.1.10 to 0.2.3; (*)
o) prefix path for third-party sflow module.
Requested by: Rudolph Sand aka r dot sand at new-net dot net (*)
