[nginx-announce] nginx-1.6.1

Maxim Dounin mdounin at mdounin.ru
Tue Aug 5 13:56:43 UTC 2014


Changes with nginx 1.6.1                                         05 Aug 2014

    *) Security: pipelined commands were not discarded after STARTTLS
       command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6.
       Thanks to Chris Boulton.

    *) Bugfix: the $uri variable might contain garbage when returning errors
       with code 400.
       Thanks to Sergey Bobrov.

    *) Bugfix: in the "none" parameter in the "smtp_auth" directive; the bug
       had appeared in 1.5.6.
       Thanks to Svyatoslav Nikolsky.


-- 
Maxim Dounin
http://nginx.org/en/donation.html



More information about the nginx-announce mailing list