[nginx-announce] nginx-1.6.1
Maxim Dounin
mdounin at mdounin.ru
Tue Aug 5 13:56:43 UTC 2014
Changes with nginx 1.6.1 05 Aug 2014
*) Security: pipelined commands were not discarded after STARTTLS
command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6.
Thanks to Chris Boulton.
*) Bugfix: the $uri variable might contain garbage when returning errors
with code 400.
Thanks to Sergey Bobrov.
*) Bugfix: in the "none" parameter in the "smtp_auth" directive; the bug
had appeared in 1.5.6.
Thanks to Svyatoslav Nikolsky.
--
Maxim Dounin
http://nginx.org/en/donation.html
More information about the nginx-announce
mailing list