From owner-cvs-ports@FreeBSD.ORG Fri Apr 13 12:17:05 2012 Return-Path: Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 66190106564A; Fri, 13 Apr 2012 12:17:05 +0000 (UTC) (envelope-from osa@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 52B348FC23; Fri, 13 Apr 2012 12:17:05 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id q3DCH5jS085408; Fri, 13 Apr 2012 12:17:05 GMT (envelope-from osa@repoman.freebsd.org) Received: (from osa@localhost) by repoman.freebsd.org (8.14.4/8.14.4/Submit) id q3DCH5LP085407; Fri, 13 Apr 2012 12:17:05 GMT (envelope-from osa) Message-Id: <201204131217.q3DCH5LP085407@repoman.freebsd.org> From: "Sergey A. Osokin" Date: Fri, 13 Apr 2012 12:17:05 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/www/nginx-devel Makefile distinfo X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Apr 2012 12:17:05 -0000 osa 2012-04-13 12:17:05 UTC FreeBSD ports repository Modified files: www/nginx-devel Makefile distinfo Log: Security update from 1.1.18 to 1.1.19. *) Security: specially crafted mp4 file might allow to overwrite memory locations in a worker process if the ngx_http_mp4_module was used, potentially resulting in arbitrary code execution (CVE-2012-2089). Thanks to Matthew Daley. *) Bugfix: nginx/Windows might be terminated abnormally. Thanks to Vincent Lee. *) Bugfix: nginx hogged CPU if all servers in an upstream were marked as "backup". *) Bugfix: the "allow" and "deny" directives might be inherited incorrectly if they were used with IPv6 addresses. *) Bugfix: the "modern_browser" and "ancient_browser" directives might be inherited incorrectly. *) Bugfix: timeouts might be handled incorrectly on Solaris/SPARC. *) Bugfix: in the ngx_http_mp4_module. Revision Changes Path 1.444 +1 -1 ports/www/nginx-devel/Makefile 1.388 +2 -2 ports/www/nginx-devel/distinfo