comparison text/en/CHANGES-1.14 @ 2297:921102d620e9

nginx-1.14.2
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 04 Dec 2018 18:00:08 +0300
parents 3fa4584907b8
children
comparison
equal deleted inserted replaced
2296:e2e71f9477a8 2297:921102d620e9
1
2 Changes with nginx 1.14.2 04 Dec 2018
3
4 *) Bugfix: nginx could not be built by gcc 8.1.
5
6 *) Bugfix: nginx could not be built on Fedora 28 Linux.
7
8 *) Bugfix: in handling of client addresses when using unix domain listen
9 sockets to work with datagrams on Linux.
10
11 *) Change: the logging level of the "http request", "https proxy
12 request", "unsupported protocol", "version too low", "no suitable key
13 share", and "no suitable signature algorithm" SSL errors has been
14 lowered from "crit" to "info".
15
16 *) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to
17 switch off "ssl_prefer_server_ciphers" in a virtual server if it was
18 switched on in the default server.
19
20 *) Bugfix: nginx could not be built with LibreSSL 2.8.0.
21
22 *) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL
23 1.1.1, the TLS 1.3 protocol was always enabled.
24
25 *) Bugfix: sending a disk-buffered request body to a gRPC backend might
26 fail.
27
28 *) Bugfix: connections with some gRPC backends might not be cached when
29 using the "keepalive" directive.
30
31 *) Bugfix: a segmentation fault might occur in a worker process if the
32 ngx_http_mp4_module was used on 32-bit platforms.
33
1 34
2 Changes with nginx 1.14.1 06 Nov 2018 35 Changes with nginx 1.14.1 06 Nov 2018
3 36
4 *) Security: when using HTTP/2 a client might cause excessive memory 37 *) Security: when using HTTP/2 a client might cause excessive memory
5 consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844). 38 consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).