freebsd-ports/www/nginx-devel
Sergey A. Osokin ef5d0c59d8 Security update from 1.1.18 to 1.1.19.
<ChangeLog>

*) Security: specially crafted mp4 file might allow to overwrite memory
   locations in a worker process if the ngx_http_mp4_module was used,
   potentially resulting in arbitrary code execution (CVE-2012-2089).
   Thanks to Matthew Daley.

*) Bugfix: nginx/Windows might be terminated abnormally.
   Thanks to Vincent Lee.

*) Bugfix: nginx hogged CPU if all servers in an upstream were marked as
   "backup".

*) Bugfix: the "allow" and "deny" directives might be inherited
   incorrectly if they were used with IPv6 addresses.

*) Bugfix: the "modern_browser" and "ancient_browser" directives might
   be inherited incorrectly.

*) Bugfix: timeouts might be handled incorrectly on Solaris/SPARC.

*) Bugfix: in the ngx_http_mp4_module.

</ChangeLog>
2012-04-13 12:17:05 +00:00
..
files Fix fetch notice third-party module. 2012-02-29 19:53:17 +00:00
distinfo Security update from 1.1.18 to 1.1.19. 2012-04-13 12:17:05 +00:00
Makefile Security update from 1.1.18 to 1.1.19. 2012-04-13 12:17:05 +00:00
pkg-descr Update from 1.1.5 to 1.1.6. 2011-10-18 06:54:34 +00:00
pkg-plist