Security update from 1.1.18 to 1.1.19.

<ChangeLog>

*) Security: specially crafted mp4 file might allow to overwrite memory
   locations in a worker process if the ngx_http_mp4_module was used,
   potentially resulting in arbitrary code execution (CVE-2012-2089).
   Thanks to Matthew Daley.

*) Bugfix: nginx/Windows might be terminated abnormally.
   Thanks to Vincent Lee.

*) Bugfix: nginx hogged CPU if all servers in an upstream were marked as
   "backup".

*) Bugfix: the "allow" and "deny" directives might be inherited
   incorrectly if they were used with IPv6 addresses.

*) Bugfix: the "modern_browser" and "ancient_browser" directives might
   be inherited incorrectly.

*) Bugfix: timeouts might be handled incorrectly on Solaris/SPARC.

*) Bugfix: in the ngx_http_mp4_module.

</ChangeLog>
This commit is contained in:
Sergey A. Osokin 2012-04-13 12:17:05 +00:00
parent 779e68c171
commit ef5d0c59d8
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=294769
2 changed files with 3 additions and 3 deletions

View File

@ -6,7 +6,7 @@
#
PORTNAME= nginx
PORTVERSION= 1.1.18
PORTVERSION= 1.1.19
CATEGORIES= www
MASTER_SITES= http://nginx.org/download/
MASTER_SITES+= ${MASTER_SITE_LOCAL}

View File

@ -1,5 +1,5 @@
SHA256 (nginx-1.1.18.tar.gz) = bf040821f3ffa3c733e14894b427eed119316561ab6617e5f0b13aa6353aa3ae
SIZE (nginx-1.1.18.tar.gz) = 714741
SHA256 (nginx-1.1.19.tar.gz) = 9630bd7532d63832edc41e954c0cd5ef8cd00724feeab37f2d793d4de97873f6
SIZE (nginx-1.1.19.tar.gz) = 715741
SHA256 (giom-nginx_accept_language_module-02262ce.tar.gz) = 3191f4caa70d9a8942c4f10b6abaaa96af451991d4b5e1e3d7b991376b00bf0c
SIZE (giom-nginx_accept_language_module-02262ce.tar.gz) = 3398
SHA256 (nginx-accesskey-2.0.3.tar.gz) = d9e94321e78a02de16c57f3e048fd31059fd8116ed03d6de7180f435c52502b1