cvs commit: ports/www/nginx-devel Makefile distinfo
Jason Helfman
jgh at FreeBSD.org
Sat Apr 14 06:24:18 UTC 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Fri, Apr 13, 2012 at 12:17:05PM +0000, Sergey A. Osokin thus spake:
>osa 2012-04-13 12:17:05 UTC
>
> FreeBSD ports repository
>
> Modified files:
> www/nginx-devel Makefile distinfo
> Log:
> Security update from 1.1.18 to 1.1.19.
>
> <ChangeLog>
>
> *) Security: specially crafted mp4 file might allow to overwrite memory
> locations in a worker process if the ngx_http_mp4_module was used,
> potentially resulting in arbitrary code execution (CVE-2012-2089).
> Thanks to Matthew Daley.
>
> *) Bugfix: nginx/Windows might be terminated abnormally.
> Thanks to Vincent Lee.
>
> *) Bugfix: nginx hogged CPU if all servers in an upstream were marked as
> "backup".
>
> *) Bugfix: the "allow" and "deny" directives might be inherited
> incorrectly if they were used with IPv6 addresses.
>
> *) Bugfix: the "modern_browser" and "ancient_browser" directives might
> be inherited incorrectly.
>
> *) Bugfix: timeouts might be handled incorrectly on Solaris/SPARC.
>
> *) Bugfix: in the ngx_http_mp4_module.
>
> </ChangeLog>
>
> Revision Changes Path
> 1.444 +1 -1 ports/www/nginx-devel/Makefile
> 1.388 +2 -2 ports/www/nginx-devel/distinfo
>
>http://www.FreeBSD.org/cgi/cvsweb.cgi/ports/www/nginx-devel/Makefile.diff?&r1=1.443&r2=1.444&f=h
>http://www.FreeBSD.org/cgi/cvsweb.cgi/ports/www/nginx-devel/distinfo.diff?&r1=1.387&r2=1.388&f=h
>
Is there a vuxml entry that is being put together for this update?
Thanks.
- -jgh
- --
Jason Helfman | FreeBSD Committer
jgh at FreeBSD.org | http://people.freebsd.org/~jgh
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)
iQEcBAEBAgAGBQJPiRfNAAoJECBZmmNBUNPcURIIALRWC/eQ+oPfJ6ThsuS0h1iS
60JfH1hHPHrRUhz/tBdVeOqK7tbRnmTArF+hiV4FtD3eCHUpLfp6Hn57FZfXzYtg
Fqhb9+QSyKiCG7QUmi6DKsuz/Nzd825Ahrzb4DCLgGdwMnyMjyMJadBfvE4V21Yd
DAhN5K6a5FF8mOlN2Dz13WtpTIPWhaflPW0wSCuUrQ3zT57DaS2u9G/GlFmWixSC
NlkvM2PBm+KgI/WUfkQAkWO95i4XSvo0Rz5AdXENsEz2pyhEHnYaVLBuiMQ/iLzZ
7jds1S4v6rQVrwOKtAktX4r9JojTpBUMsNpX7i4VKVbpdShrB99WwM7+1UKsm60=
=UIRv
-----END PGP SIGNATURE-----
More information about the cvs-ports
mailing list