Changelog for
nginx-1.0-extra-1.0.10-7.4.x86_64.rpm :
Fri Dec 2 13:00:00 2011 schubiAATTsuse.com
- 1.0.10 includes a fix for:
Fixed VUL-0: CVE-2011-4315: nginx: heap overflow (bnc #731084)
Fri Nov 18 13:00:00 2011 schubiAATTsuse.com
- Uppstream update to 1.0.10
Changes with nginx 1.0.10
* ) Bugfix: a segmentation fault might occur in a worker process if
resolver got a big DNS response.
Thanks to Ben Hawkes.
* ) Bugfix: in cache key calculation if internal MD5 implementation was
used; the bug had appeared in 1.0.4.
* ) Bugfix: the module ngx_http_mp4_module sent incorrect
\"Content-Length\" response header line if the \"start\" argument was
used.
Thanks to Piotr Sikora.
Changes with nginx 1.0.9
* ) Change: now the 0x7F-0x1F characters are escaped as \\xXX in an
access_log.
* ) Change: now SIGWINCH signal works only in daemon mode.
* ) Feature: \"proxy/fastcgi/scgi/uwsgi_ignore_headers\" directives support
the following additional values: X-Accel-Limit-Rate,
X-Accel-Buffering, X-Accel-Charset.
* ) Feature: decrease of memory consumption if SSL is used.
* ) Feature: accept filters are now supported on NetBSD.
* ) Feature: the \"uwsgi_buffering\" and \"scgi_buffering\" directives.
Thanks to Peter Smit.
* ) Bugfix: a segmentation fault occurred on start or while
reconfiguration if the \"ssl\" directive was used at http level and
there was no \"ssl_certificate\" defined.
* ) Bugfix: some UTF-8 characters were processed incorrectly.
Thanks to Alexey Kuts.
* ) Bugfix: the ngx_http_rewrite_module directives specified at \"server\"
level were executed twice if no matching locations were defined.
* ) Bugfix: a socket leak might occurred if \"aio sendfile\" was used.
* ) Bugfix: connections with fast clients might be closed after
send_timeout if file AIO was used.
* ) Bugfix: in the ngx_http_autoindex_module.
* ) Bugfix: the module ngx_http_mp4_module did not support seeking on
32-bit platforms.
* ) Bugfix: non-cacheable responses might be cached if
\"proxy_cache_bypass\" directive was used.
Thanks to John Ferlito.
* ) Bugfix: cached responses with an empty body were returned
incorrectly; the bug had appeared in 0.8.31.
* ) Bugfix: 201 responses of the ngx_http_dav_module were incorrect; the
bug had appeared in 0.8.32.
* ) Bugfix: in the \"return\" directive.
* ) Bugfix: the \"ssl_verify_client\", \"ssl_verify_depth\", and
\"ssl_prefer_server_ciphers\" directives might work incorrectly if SNI
was used.
Changes with nginx 1.0.8
* ) Bugfix: nginx could not be built --with-http_mp4_module and without
- -with-debug option.
Changes with nginx 1.0.7
* ) Change: now if total size of all ranges is greater than source
response size, then nginx disables ranges and returns just the source
response.
* ) Feature: the \"max_ranges\" directive.
* ) Feature: the module ngx_http_mp4_module.
* ) Feature: the \"worker_aio_requests\" directive.
* ) Bugfix: if nginx was built --with-file-aio it could not be run on
Linux kernel which did not support AIO.
* ) Bugfix: in Linux AIO error processing.
Thanks to Hagai Avrahami.
* ) Bugfix: in Linux AIO combined with open_file_cache.
* ) Bugfix: open_file_cache did not update file info on retest if file
was not atomically changed.
* ) Bugfix: reduced memory consumption for long-lived requests.
* ) Bugfix: in the \"proxy/fastcgi/scgi/uwsgi_ignore_client_abort\"
directives.
* ) Bugfix: nginx could not be built on MacOSX 10.7.
* ) Bugfix: request body might be processed incorrectly if client used
pipelining.
* ) Bugfix: in the \"request_body_in_single_buf\" directive.
* ) Bugfix: in \"proxy_set_body\" and \"proxy_pass_request_body\" directives
if SSL connection to backend was used.
* ) Bugfix: nginx hogged CPU if all servers in an upstream were marked as
\"down\".
* ) Bugfix: a segmentation fault might occur during reconfiguration if
ssl_session_cache was defined but not used in previous configuration.
* ) Bugfix: a segmentation fault might occur in a worker process if many
backup servers were used in an upstream.
Changes with nginx 1.0.6
* ) Feature: cache loader run time decrease.
* ) Feature: loading time decrease of configuration with large number of
HTTPS sites.
* ) Feature: now nginx supports ECDHE key exchange ciphers.
Thanks to Adrian Kotelba.
* ) Feature: the \"lingering_close\" directive.
* ) Feature: now shared zones and caches use POSIX semaphores on Solaris.
Thanks to Den Ivanov.
* ) Bugfix: nginx could not be built on Linux 3.0.
* ) Bugfix: a segmentation fault might occur in a worker process if
\"fastcgi/scgi/uwsgi_param\" directives were used with values starting
with \"HTTP_\"; the bug had appeared in 0.8.40.
* ) Bugfix: in closing connection for pipelined requests.
* ) Bugfix: nginx did not disable gzipping if client sent \"gzip;q=0\" in
\"Accept-Encoding\" request header line.
* ) Bugfix: in timeout in unbuffered proxied mode.
* ) Bugfix: memory leaks when a \"proxy_pass\" directive contains variables
and proxies to an HTTPS backend.
* ) Bugfix: in parameter validaiton of a \"proxy_pass\" directive with
variables.
Thanks to Lanshun Zhou.
* ) Bugfix: SSL did not work on QNX.
* ) Bugfix: SSL modules could not be built by gcc 4.6 without
- -with-debug option.
Mon Oct 24 14:00:00 2011 schubiAATTsuse.com
- Reduce requirement of rubygem-rack to 1_1 cause 1_3 produces
errors.
Tue Oct 11 14:00:00 2011 vgreckAATTximxim.com
- update 1.0.8
* added libxml2-devel build depency to succeed builds on some repos
* added headers_more and upload_progress options
* disabled ruby option
* fixed patches
Tue Aug 16 14:00:00 2011 ammlerAATTopenttdcoop.org
- upstream update 1.0.5
* Change: now default SSL ciphers are \"HIGH:!aNULL:!MD5\".
* Feature: the \"referer_hash_max_size\" and \"referer_hash_bucket_size\"
directives.
* Feature: $uid_reset variable.
* Bugfix: a segmentation fault might occur in a worker process, if a
caching was used.
* Bugfix: worker processes may got caught in an endless loop during
reconfiguration, if a caching was used; the bug had appeared in
0.8.48.
* Bugfix: \"stalled cache updating\" alert.
- add logrotate
* add reopen killsiganl -USR1 to init script
* logrotate conf
- Backport r4003: Configure: catch up with new Linux version numbering
Fri Jun 24 14:00:00 2011 jreidingerAATTnovell.com
- fix init script to write use its pid file to allow separate nginx
server run independent (bnc#702005)
Thu Jun 9 14:00:00 2011 ammlerAATTopenttdcoop.org
- upstream update 1.0.4
* Change: now regular expressions case sensitivity in the \"map\"
directive is given by prefixes \"~\" or \"~
*\".
* Feature: now shared zones and caches use POSIX semaphores on
Linux. Thanks to Denis F. Latypoff.
* Bugfix: \"stalled\" cache updating\" alert.
* Bugfix: nginx could not be built
- -without-http_auth_basic_module; the bug had appeared in
1.0.3.
- additional changes from 1.0.3
- Feature: the \"auth_basic_user_file\" directive supports \"$apr1\",
\"{PLAIN}\", and \"{SSHA}\" password encryption methods. Thanks to
Maxim Dounin.
- Feature: the \"geoip_org\" directive and $geoip_org variable.
Thanks to Alexander Uskov, Arnaud Granal, and Denis F.
Latypoff.
- Feature: ngx_http_geo_module and ngx_http_geoip_module support
IPv4 addresses mapped to IPv6 addresses.
- Bugfix: a segmentation fault occurred in a worker process
during testing IPv4 address mapped to IPv6 address, if access
or deny rules were defined only for IPv6; the bug had appeared
in 0.8.22.
- Bugfix: a cached response may be broken if proxy/fastcgi/scgi/
uwsgi_cache_bypass and proxy/fastcgi/scgi/uwsgi_no_cache
directive values were different; the bug had appeared in
0.8.46.
- additional changes from 1.0.2
- Feature: now shared zones and caches use POSIX semaphores.
- Bugfix: in the \"rotate\" parameter of the \"image_filter\"
directive. Thanks to Adam Bocim.
- Bugfix: nginx could not be built on Solaris; the bug had
appeared in 1.0.1.
- additional changes from 1.0.1
- Change: now the \"split_clients\" directive uses MurmurHash2
algorithm because of better distribution. Thanks to Oleg
Mamontov.
- Change: now long strings starting with zero are not considered
as false values. Thanks to Maxim Dounin.
- Change: now nginx uses a default listen backlog value 511 on
Linux.
- Feature: the $upstream_... variables may be used in the SSI and
perl modules.
- Bugfix: now nginx limits better disk cache size. Thanks to
Oleg Mamontov.
- Bugfix: a segmentation fault might occur while parsing
incorrect IPv4 address; the bug had appeared in 0.9.3. Thanks
to Maxim Dounin.
- Bugfix: nginx could not be built by gcc 4.6 without
- -with-debug option.
- Bugfix: nginx could not be built on Solaris 9 and earlier; the
bug had appeared in 0.9.3. Thanks to Dagobert Michelsen.
- Bugfix: $request_time variable had invalid values if
subrequests were used; the bug had appeared in 0.8.47. Thanks
to Igor A. Valcov.
- new config directories included in context http:
conf.d/
*.conf on top before first server
vhosts.d/
*.conf on bottom (for servers)
Thu May 26 14:00:00 2011 mrueckertAATTsuse.de
- more accurate license header: BSD-2-Clause
Thu Apr 14 14:00:00 2011 mrueckertAATTsuse.de
- move the libatomic usage to sle11/11.1 or newer
Thu Apr 14 14:00:00 2011 mrueckertAATTsuse.de
- remove /srv/www/htdocs/index.html (bnc#670031).
Thu Apr 14 14:00:00 2011 mrueckertAATTsuse.de
- build with libatomic_ops
Thu Apr 14 14:00:00 2011 mrueckertAATTsuse.de
- minor spec file cleanup
- use perl instead of dos2unix
- remove commented out patches from the preamble
- fix ordering in preamble
Wed Apr 13 14:00:00 2011 alexandreAATTexatati.com.br
- Add epoll in default events config as recommended in
http://www.kegel.com/c10k.html#nb.epoll.
Tue Apr 12 14:00:00 2011 mrueckertAATTsuse.de
- enable building of the passenger extension
Tue Apr 12 14:00:00 2011 mrueckertAATTsuse.de
- added more directives to the configure line
- specify tmp path for scgi/uwsgi
- enabled more modules
- geoip lookup
- http_degradation
- mail ssl support
- added build time options to build the profiling/testing stuff
- see with_google_perftools and with_cpp_test
Tue Apr 12 14:00:00 2011 mrueckertAATTsuse.de
- start 1.0 branch package
