cvs commit: ports/www/nginx-devel Makefile distinfo

osa         2012-04-13 12:17:05 UTC

  FreeBSD ports repository

  Modified files:
    www/nginx-devel      Makefile distinfo 
  Log:
  Security update from 1.1.18 to 1.1.19.

  <ChangeLog>

  *) Security: specially crafted mp4 file might allow to overwrite memory
     locations in a worker process if the ngx_http_mp4_module was used,
     potentially resulting in arbitrary code execution (CVE-2012-2089).
     Thanks to Matthew Daley.

  *) Bugfix: nginx/Windows might be terminated abnormally.
     Thanks to Vincent Lee.

  *) Bugfix: nginx hogged CPU if all servers in an upstream were marked as
     "backup".

  *) Bugfix: the "allow" and "deny" directives might be inherited
     incorrectly if they were used with IPv6 addresses.

  *) Bugfix: the "modern_browser" and "ancient_browser" directives might
     be inherited incorrectly.

  *) Bugfix: timeouts might be handled incorrectly on Solaris/SPARC.

  *) Bugfix: in the ngx_http_mp4_module.

  </ChangeLog>

  Revision  Changes    Path
  1.444     +1 -1      ports/www/nginx-devel/Makefile
  1.388     +2 -2      ports/www/nginx-devel/distinfo
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"