Changelog for
nginx-1.27.4-24.1.x86_64.rpm :
* Tue Sep 03 2024 neutrino8AATTgmail.com- Update to version 1.27.4
* Tue Aug 13 2024 neutrino8AATTgmail.com- Update to version 1.27.3
* Tue Jul 09 2024 neutrino8AATTgmail.com- Update to version 1.27.2
* Tue Jun 04 2024 neutrino8AATTopensuse.org- Update to version 1.27.1
* Tue May 14 2024 neutrino8AATTopensuse.org- Update to version 1.27.0
* Tue Apr 02 2024 neutrino8AATTopensuse.org- Update to version 1.25.5
* Wed Feb 14 2024 neutrino8AATTopensuse.org- Update to version 1.25.4
* Tue Oct 24 2023 neutrino8AATTopensuse.org- Update to version 1.25.3
* Tue Aug 15 2023 neutrino8AATTopensuse.org- Update to version 1.25.2
* Tue Jun 13 2023 neutrino8AATTopensuse.org- Update to version 1.25.1
* Tue May 23 2023 neutrino8AATTopensuse.org- Update to version 1.25.0
* Tue Mar 28 2023 neutrino8AATTopensuse.org- Update to version 1.23.4
* Tue Dec 13 2022 neutrino8AATTopensuse.org- Update to version 1.23.3
* Bugfix: an error might occur when reading PROXY protocol version 2 header with large number of TLVs.
* Bugfix: a segmentation fault might occur in a worker process if SSI was used to process subrequests created by other modules. Thanks to Ciel Zhao.
* Workaround: when a hostname used in the \"listen\" directive resolves to multiple addresses, nginx now ignores duplicates within these addresses.
* Bugfix: nginx might hog CPU during unbuffered proxying if SSL connections to backends were used.
* Wed Oct 19 2022 neutrino8AATTopensuse.org- Update to version 1.23.2
* Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash, worker process memory disclosure, or might have potential other impact (CVE-2022-41741, CVE-2022-41742).
* Feature: the \"$proxy_protocol_tlv_...\" variables.
* Feature: TLS session tickets encryption keys are now automatically rotated when using shared memory in the \"ssl_session_cache\" directive.
* Change: the logging level of the \"bad record type\" SSL errors has been lowered from \"crit\" to \"info\". Thanks to Murilo Andrade.
* Change: now when using shared memory in the \"ssl_session_cache\" directive the \"could not allocate new session\" errors are logged at the \"warn\" level instead of \"alert\" and not more often than once per second.
* Bugfix: nginx/Windows could not be built with OpenSSL 3.0.x.
* Bugfix: in logging of the PROXY protocol errors. Thanks to Sergey Brester.
* Workaround: shared memory from the \"ssl_session_cache\" directive was spent on sessions using TLS session tickets when using TLSv1.3 with OpenSSL.
* Workaround: timeout specified with the \"ssl_session_timeout\" directive did not work when using TLSv1.3 with OpenSSL or BoringSSL.