File nginx-1.2.changes of Package nginx-1.2 - j0ke.net Open Build Service

File nginx-1.2.changes of Package nginx-1.2 (Revision b4d856af8b8b8d6318cc495a14932276)

Currently displaying revision b4d856af8b8b8d6318cc495a14932276, show latest

-------------------------------------------------------------------
Wed Nov 20 19:30:13 UTC 2013 - cs@linux-administrator.com

- added CVE-2013-4547.patch 
- update rtmp module to 1.0.6

-------------------------------------------------------------------
Sun Aug  4 17:24:56 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 1.0.2

-------------------------------------------------------------------
Tue Jul 30 16:59:43 UTC 2013 - cs@linux-administrator.com

- update modsecurity to 2.7.5

-------------------------------------------------------------------
Sat Jun 29 14:07:38 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 1.0.1

-------------------------------------------------------------------
Mon May 27 17:00:27 UTC 2013 - cs@linux-administrator.com

- update modsecurity to 2.7.4

-------------------------------------------------------------------
Sat May 25 14:00:14 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.20

-------------------------------------------------------------------
Mon May 13 18:49:46 UTC 2013 - cs@linux-administrator.com

- upstream update to 1.2.9
  * Security: contents of worker process memory might be sent to a client
    if HTTP backend returned specially crafted response (CVE-2013-2070);
    the bug had appeared in 1.1.4.

- update rtmp module to 0.9.19

-------------------------------------------------------------------
Fri Apr 26 19:07:43 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.18

-------------------------------------------------------------------
Sun Apr 14 09:22:18 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.14

-------------------------------------------------------------------
Tue Apr  2 20:29:55 UTC 2013 - cs@linux-administrator.com

- upstream update to 1.2.8
  * Bugfix: new sessions were not always stored if the "ssl_session_cache
    shared" directive was used and there was no free space in shared
    memory.
  * Bugfix: responses might hang if subrequests were used and a DNS error
    happened during subrequest processing.
  * Bugfix: in the ngx_http_mp4_module.
  * Bugfix: in backend usage accounting.

-------------------------------------------------------------------
Fri Mar 29 17:33:09 UTC 2013 - cs@linux-administrator.com

- update modsecurity to 2.7.3

-------------------------------------------------------------------
Fri Mar 29 10:10:21 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.13

-------------------------------------------------------------------
Mon Mar  4 15:17:11 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.11

-------------------------------------------------------------------
Thu Feb 28 09:28:26 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.8

-------------------------------------------------------------------
Tue Feb 12 14:39:49 UTC 2013 - cs@linux-administrator.com

- upstream update to 1.2.7
  * Change: now if the "include" directive with mask is used on Unix
    systems, included files are sorted in alphabetical order.
  * Change: the "add_header" directive adds headers to 201 responses.
  * Feature: the "geo" directive now supports IPv6 addresses in CIDR
    notation.
  * Feature: the "flush" and "gzip" parameters of the "access_log"
    directive.
  * Feature: variables support in the "auth_basic" directive.
  * Feature: the $pipe, $request_length, $time_iso8601, and $time_local
    variables can now be used not only in the "log_format" directive.
  * Feature: IPv6 support in the ngx_http_geoip_module.
  * Bugfix: nginx could not be built with the ngx_http_perl_module in
    some cases.
  * Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_xslt_module was used.
  * Bugfix: nginx could not be built on MacOSX in some cases.
  * Bugfix: the "limit_rate" directive with high rates might result in
    truncated responses on 32-bit platforms.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "if" directive was used.
  * Bugfix: a "100 Continue" response was issued with "413 Request Entity
    Too Large" responses.
  * Bugfix: the "image_filter", "image_filter_jpeg_quality" and
    "image_filter_sharpen" directives might be inherited incorrectly.
  * Bugfix: "crypt_r() failed" errors might appear if the "auth_basic"
    directive was used on Linux.
  * Bugfix: in backup servers handling.
  * Bugfix: proxied HEAD requests might return incorrect response if the
    "gzip" directive was used.
  * Bugfix: a segmentation fault occurred on start or during
    reconfiguration if the "keepalive" directive was specified more than
    once in a single upstream block.
  * Bugfix: in the "proxy_method" directive.
  * Bugfix: a segmentation fault might occur in a worker process if
    resolver was used with the poll method.
  * Bugfix: nginx might hog CPU during SSL handshake with a backend if
    the select, poll, or /dev/poll methods were used.
  * Bugfix: the "[crit] SSL_write() failed (SSL:)" error.
  * Bugfix: in the "fastcgi_keep_conn" directive.

- update rtmp module to 0.9.7

-------------------------------------------------------------------
Fri Jan 25 20:12:53 UTC 2013 - cs@linux-administrator.com

- update modsecurity to 2.7.2

-------------------------------------------------------------------
Fri Jan 25 19:22:23 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.1

-------------------------------------------------------------------
Wed Jan 16 20:39:43 UTC 2013 - cs@linux-administrator.com

- update rtmp module to 0.9.0

-------------------------------------------------------------------
Sat Jan 12 19:30:44 UTC 2013 - cs@linux-administrator.com

- added rtmp module 0.8.7

-------------------------------------------------------------------
Tue Dec 11 22:20:38 UTC 2012 - cs@linux-administrator.com

- upstream update to 1.2.6
  * Feature: the $request_time and $msec variables can now be used not
    only in the "log_format" directive.
  * Bugfix: cache manager and cache loader processes might not be able to
    start if more than 512 listen sockets were used.
  * Bugfix: in the ngx_http_dav_module.

-------------------------------------------------------------------
Thu Nov 15 19:42:31 UTC 2012 - cs@linux-administrator.com

- disable modsecurity build (segfaults)
 segfault at 8 ip 000000000056bb39 sp 00007fffe10d6550 error 4 in nginx[400000+1d8000]

-------------------------------------------------------------------
Thu Nov 15 19:30:06 UTC 2012 - cs@linux-administrator.com

- update modsecurity to 2.7.1

-------------------------------------------------------------------
Tue Nov 13 20:21:05 UTC 2012 - cs@linux-administrator.com

- upstream update to 1.2.5
  * Feature: the "optional_no_ca" parameter of the "ssl_verify_client"
    directive.
  * Feature: the $bytes_sent, $connection, and $connection_requests
    variables can now be used not only in the "log_format" directive.
  * Feature: resolver now randomly rotates addresses returned from cache.
  * Feature: the "auto" parameter of the "worker_processes" directive.
  * Bugfix: "cache file ... has md5 collision" alert.
  * Bugfix: OpenSSL 0.9.7 compatibility.

-------------------------------------------------------------------
Sat Oct 20 18:03:39 UTC 2012 - cs@linux-administrator.com
 
- update modsecurity to 2.7.0
  * http://www.modsecurity.org/projects/modsecurity/nginx/index.html

-------------------------------------------------------------------
Sun Oct  7 14:07:47 UTC 2012 - cs@linux-administrator.com

- added dav_ext_module
  * https://github.com/arut/nginx-dav-ext-module

-------------------------------------------------------------------
Sun Oct  7 10:09:28 UTC 2012 - cs@linux-administrator.com

- upstream update to 1.2.4
  * Bugfix: in the "limit_req" directive; the bug had appeared in 1.1.14.
  * Bugfix: nginx could not be built by gcc 4.7 with -O2 optimization if
    the --with-ipv6 option was used.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "map" directive was used with variables as values.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "geo" directive was used with the "ranges" parameter but without the
    "default" parameter; the bug had appeared in 0.8.43.
  * Bugfix: in the -p command-line parameter handling.
  * Bugfix: in the mail proxy server.
  * Bugfix: of minor potential bugs.
  * Bugfix: nginx/Windows could not be built with Visual Studio 2005 Express.

- added limit_traffic_rate_module
  * https://github.com/bigplum/Nginx-limit-traffic-rate-module

- added upstream_fair_module
  * http://wiki.nginx.org/HttpUpstreamFairModule

-------------------------------------------------------------------
Mon Oct  1 09:50:22 UTC 2012 - cs@linux-administrator.com

- added nginx_ajp_module 
  * https://github.com/yaoweibin/nginx_ajp_module

-------------------------------------------------------------------
Mon Sep 24 20:19:21 UTC 2012 - cs@linux-administrator.com

- added modsecurity-ngx_http_preaccess_phase.patch

-------------------------------------------------------------------
Mon Sep 24 19:38:02 UTC 2012 - cs@linux-administrator.com

- refresh perl_vendor_install patch

-------------------------------------------------------------------
Mon Sep 24 19:25:41 UTC 2012 - cs@linux-administrator.com

- upstream update 1.2.3
  * Feature: the Clang compiler support.
  * Bugfix: extra listening sockets might be created.
  * Bugfix: nginx/Windows might hog CPU if a worker process failed to start.
  * Bugfix: the "proxy_pass_header", "fastcgi_pass_header",
    "scgi_pass_header", "uwsgi_pass_header", "proxy_hide_header",
    "fastcgi_hide_header", "scgi_hide_header", and "uwsgi_hide_header"
    directives might be inherited incorrectly.
  * Bugfix: trailing dot in a source value was not ignored if the "map"
    directive was used with the "hostnames" parameter.
  * Bugfix: incorrect location might be used to process a request if a
    URI was changed via a "rewrite" directive before an internal redirect
    to a named location.

- update modesecurity to 2.7rc3
  * http://www.modsecurity.org/projects/modsecurity/nginx/index.html

-------------------------------------------------------------------
Sun Jul 29 19:07:51 UTC 2012 - cs@linux-administrator.com

- build with modsecurity 2.7rc2
  * http://www.modsecurity.org/projects/modsecurity/nginx/index.html

-------------------------------------------------------------------
Thu Jul  5 14:33:04 UTC 2012 - cs@linux-administrator.com

- upstream update 1.2.2
  * Change: the "single" parameter of the "keepalive" directive is now
    ignored.
  * Change: SSL compression is now disabled when using all versions of
    OpenSSL, including ones prior to 1.0.0.
  * Feature: the "proxy_pass", "fastcgi_pass", "scgi_pass", "uwsgi_pass"
    directives, and the "server" directive inside the "upstream" block,
    now support IPv6 addresses.
  * Feature: the "resolver" directive now support IPv6 addresses and an
    optional port specification.
  * Feature: the "least_conn" directive inside the "upstream" block.
  * Feature: it is now possible to specify a weight for servers while
    using the "ip_hash" directive.
  * Feature: it is now possible to use the "ip_hash" directive to balance
    IPv6 clients.
  * Feature: the $status variable can now be used not only in the
    "log_format" directive.
  * Bugfix: nginx could not be built with ngx_cpp_test_module; the bug
    had appeared in 1.1.12.
  * Bugfix: access to variables from SSI and embedded perl module might
    not work after reconfiguration.
  * Bugfix: in the ngx_http_xslt_filter_module.
  * Bugfix: memory leak if $geoip_org variable was used.
  * Bugfix: in the "proxy_cookie_domain" and "proxy_cookie_path"
    directives.
  * Bugfix: a segmentation fault might occur in a worker process on
    shutdown if the "resolver" directive was used.
  * Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used.
  * Bugfix: in the ngx_http_mp4_module.
  * Bugfix: a segmentation fault might occur in a worker process if
    conflicting wildcard server names were used.
  * Bugfix: nginx might be terminated abnormally on a SIGBUS signal on
    ARM platform.
  * Bugfix: an alert "sendmsg() failed (9: Bad file number)" on HP-UX
    while reconfiguration.

-------------------------------------------------------------------
Sun Jun 17 10:40:51 UTC 2012 - cs@linux-administrator.com

- upstream update 1.2.1
  * Security: now nginx/Windows ignores trailing dot in URI path
    component, and does not allow URIs with ":$" in it.
  * Feature: the "debug_connection" directive now supports IPv6 addresses
    and the "unix:" parameter.
  * Feature: the "set_real_ip_from" directive and the "proxy" parameter
    of the "geo" directive now support IPv6 addresses.
  * Feature: the "real_ip_recursive", "geoip_proxy", and
    "geoip_proxy_recursive" directives.
  * Feature: the "proxy_recursive" parameter of the "geo" directive.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "resolver" directive was used.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "fastcgi_pass", "scgi_pass", or "uwsgi_pass" directives were used and
    backend returned incorrect response.
  * Bugfix: a segmentation fault might occur in a worker process if the
    "rewrite" directive was used and new request arguments in a
    replacement used variables.
  * Bugfix: nginx might hog CPU if the open file resource limit was reached.
  * Bugfix: nginx might loop infinitely over backends if the
    "proxy_next_upstream" directive with the "http_404" parameter was
    used and there were backup servers specified in an upstream block.
  * Bugfix: adding the "down" parameter of the "server" directive might
    cause unneeded client redistribution among backend servers if the
    "ip_hash" directive was used.
  * Bugfix: socket leak.
  * Bugfix: in the ngx_http_fastcgi_module.

-------------------------------------------------------------------
Sun May  6 07:42:07 UTC 2012 - cs@linux-administrator.com

- upstream update 1.2.0
  * Bugfix: a segmentation fault might occur in a worker process if the
    "try_files" directive was used; the bug had appeared in 1.1.19.
  * Bugfix: response might be truncated if there were more than IOV_MAX
    buffers used.
  * Bugfix: in the "crop" parameter of the "image_filter" directive.