From mdounin at mdounin.ru Tue Jan 25 15:23:49 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Tue, 25 Jan 2022 18:23:49 +0300 Subject: [nginx-announce] nginx-1.21.6 Message-ID: Changes with nginx 1.21.6 25 Jan 2022 *) Bugfix: when using EPOLLEXCLUSIVE on Linux client connections were unevenly distributed among worker processes. *) Bugfix: nginx returned the "Connection: keep-alive" header line in responses during graceful shutdown of old worker processes. *) Bugfix: in the "ssl_session_ticket_key" when using TLSv1.3. -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Tue Jan 25 15:51:59 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Tue, 25 Jan 2022 18:51:59 +0300 Subject: [nginx-announce] njs-0.7.2 Message-ID: Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). This release focuses on stabilization of recently released features including async/await and fixing bugs found by various fuzzers. Learn more about njs: - Overview and introduction: https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code: https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html We are hiring: If you are a C programmer, passionate about Open Source and you love what we do, consider the following career opportunity: https://ffive.wd5.myworkdayjobs.com/NGINX/job/Ireland-Homebase/Software-Engineer-III---NGNIX-NJS_RP1022237 Feel free to try it and give us feedback on: - Github: https://github.com/nginx/njs/issues - Mailing list: https://mailman.nginx.org/mailman/listinfo/nginx-devel Changes with njs 0.7.2 25 Jan 2022 Core: *) Bugfix: fixed Array.prototype.join() when array is changed while iterating. *) Bugfix: fixed Array.prototype.slice() when array is changed while iterating. *) Bugfix: fixed Array.prototype.concat() when array is changed while iterating. *) Bugfix: fixed Array.prototype.reverse() when array is changed while iterating. *) Bugfix: fixed Buffer.concat() with subarrays. Thanks to Sylvain Etienne. *) Bugfix: fixed type confusion bug while resolving promises. *) Bugfix: fixed Function.prototype.apply() with large array arguments. *) Bugfix: fixed recursive async function calls. *) Bugfix: fixed function redeclaration. The bug was introduced in 0.7.0. _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Tue Apr 12 17:18:59 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Tue, 12 Apr 2022 10:18:59 -0700 Subject: [nginx-announce] njs-0.7.3 Message-ID: Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). This release focuses on stabilization of recently released features including async/await and fixing bugs found by various fuzzers. Learn more about njs: - Overview and introduction:https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code:https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html We are hiring: If you are a C programmer, passionate about Open Source and you love what we do, consider the following career opportunity: https://ffive.wd5.myworkdayjobs.com/NGINX/job/Ireland-Homebase/Software-Engineer-III---NGNIX-NJS_RP1022237 Feel free to try it and give us feedback on: - Github:https://github.com/nginx/njs/issues - Mailing list:https://mailman.nginx.org/mailman/listinfo/nginx-devel Changes with njs 0.7.3 12 Apr 2022 Core: *) Feature: added support of module resolution callback. This feature allows a host environment to control how imported modules are loaded. *) Bugfix: fixed backtraces while traversing imported user modules. *) Bugfix: fixed Array.prototype.concat() when "this" is a slow array. *) Bugfix: fixed frame allocation from an awaited frame. *) Bugfix: fixed allocation of large array literals. *) Bugfix: fixed interpreter when "toString" conversion fails. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From mdounin at mdounin.ru Tue May 24 15:05:34 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Tue, 24 May 2022 18:05:34 +0300 Subject: [nginx-announce] nginx-1.22.0 Message-ID: Changes with nginx 1.22.0 24 May 2022 *) 1.22.x stable branch. -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Tue May 24 16:45:47 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Tue, 24 May 2022 09:45:47 -0700 Subject: [nginx-announce] njs-0.7.4 Message-ID: Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). This release focuses on stabilization of recently released features including WebCrypto API and fixing bugs found by various fuzzers. Learn more about njs: - Overview and introduction:https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code:https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html We are hiring: If you are a C programmer, passionate about Open Source and you love what we do, consider the following career opportunity: https://ffive.wd5.myworkdayjobs.com/NGINX/job/Ireland-Homebase/Software-Engineer-III---NGNIX-NJS_RP1022237 Feel free to try it and give us feedback on: - Github:https://github.com/nginx/njs/issues - Mailing list:https://mailman.nginx.org/mailman/listinfo/nginx-devel Additional examples and howtos can be found here: - Github:https://github.com/nginx/njs-examples Changes with njs 0.7.4 24 May 2022 nginx modules: *) Feature: added extended directive to configure Fetch API. The following directives were added: "js_fetch_timeout", "js_fetch_verify", "js_fetch_buffer_size", "js_fetch_max_response_buffer_size". *) Change: r.internalRedirect() now accepts escaped URIs. *) Bugfix: fixed Response parsing with more than 8 headers in Fetch API. Core: *) Feature: added njs.version_number property. *) Feature: added compatibility with BoringSSL for WebCrypto API. *) Bugfix: fixed Array.prototype.sort() when arr size is changed in a comparator. *) Bugfix: fixed Array.prototype.slice() with slow "this" argument. *) Bugfix: fixed aggregation methods of Promise ctor with array-like object. *) Bugfix: fixed Array.prototype.lastIndexOf() with Unicode string as "this". *) Bugfix: fixed JSON.parse() when reviver function is provided. *) Bugfix: fixed Object.defineProperty() when a recursive descriptor is provided. *) Bugfix: fixed Array.prototype.fill() for typed-arrays. *) Bugfix: making function expression binding immutable according the specs. *) Bugfix: fixed redefinition of special props in Object.defineProperty(). -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From mdounin at mdounin.ru Tue Jun 21 17:03:11 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Tue, 21 Jun 2022 20:03:11 +0300 Subject: [nginx-announce] nginx-1.23.0 Message-ID: Changes with nginx 1.23.0 21 Jun 2022 *) Change in internal API: now header lines are represented as linked lists. *) Change: now nginx combines arbitrary header lines with identical names when sending to FastCGI, SCGI, and uwsgi backends, in the $r->header_in() method of the ngx_http_perl_module, and during lookup of the "$http_...", "$sent_http_...", "$sent_trailer_...", "$upstream_http_...", and "$upstream_trailer_..." variables. *) Bugfix: if there were multiple "Vary" header lines in the backend response, nginx only used the last of them when caching. *) Bugfix: if there were multiple "WWW-Authenticate" header lines in the backend response and errors with code 401 were intercepted or the "auth_request" directive was used, nginx only sent the first of the header lines to the client. *) Change: the logging level of the "application data after close notify" SSL errors has been lowered from "crit" to "info". *) Bugfix: connections might hang if nginx was built on Linux 2.6.17 or newer, but was used on systems without EPOLLRDHUP support, notably with epoll emulation layers; the bug had appeared in 1.17.5. Thanks to Marcus Ball. *) Bugfix: nginx did not cache the response if the "Expires" response header line disabled caching, but following "Cache-Control" header line enabled caching. -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Tue Jun 21 19:00:49 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Tue, 21 Jun 2022 12:00:49 -0700 Subject: [nginx-announce] njs-0.7.5 Message-ID: Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). This release focuses on stabilization of recently released features and fixing bugs found by various fuzzers. Learn more about njs: - Overview and introduction: https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code: https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html We are hiring: If you are a C programmer, passionate about Open Source and you love what we do, consider the following career opportunity: https://ffive.wd5.myworkdayjobs.com/NGINX/job/Ireland-Homebase/Software-Engineer-III---NGNIX-NJS_RP1022237 Feel free to try it and give us feedback on: - Github: https://github.com/nginx/njs/issues - Mailing list: https://mailman.nginx.org/mailman/listinfo/nginx-devel Additional examples and howtos can be found here: - Github: https://github.com/nginx/njs-examples Changes with njs 0.7.5 21 Jun 2022 nginx modules: *) Change: adapting to changes in nginx header structures. *) Bugfix: fixed r.headersOut special getters when value is absent. *) Change: returning undefined value instead of an empty string for Content-Type when the header is absent. Core: *) Bugfix: fixed catching of the exception thrown from an awaited function. *) Bugfix: fixed function value initialization. *) Bugfix: fixed interpreter when await fails. *) Bugfix: fixed typed-array constructor when source array is changed while iterating. *) Bugfix: fixed String.prototype.replace() with byte strings. *) Bugfix: fixed template literal from producing byte-strings. *) Bugfix: fixed array iterator with sparse arrays. *) Bugfix: fixed memory free while converting a flat array to a slow array. *) Bugfix: properly handling NJS_DECLINE in promise native functions. *) Bugfix: fixed working with an array-like object in Promise.all() and friends. _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From mdounin at mdounin.ru Tue Jul 19 15:06:40 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Tue, 19 Jul 2022 18:06:40 +0300 Subject: [nginx-announce] nginx-1.23.1 Message-ID: Changes with nginx 1.23.1 19 Jul 2022 *) Feature: memory usage optimization in configurations with SSL proxying. *) Feature: looking up of IPv4 addresses while resolving now can be disabled with the "ipv4=off" parameter of the "resolver" directive. *) Change: the logging level of the "bad key share", "bad extension", "bad cipher", and "bad ecpoint" SSL errors has been lowered from "crit" to "info". *) Bugfix: while returning byte ranges nginx did not remove the "Content-Range" header line if it was present in the original backend response. *) Bugfix: a proxied response might be truncated during reconfiguration on Linux; the bug had appeared in 1.17.5. -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Tue Jul 19 16:30:09 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Tue, 19 Jul 2022 09:30:09 -0700 Subject: [nginx-announce] njs-0.7.6 Message-ID: Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). Notable new features: - improved r.args: Now, duplicate keys are returned as an array, keys are case-sensitive, both keys and values are percent-decoded. For example, the query string 'a=1&b=%32&A=3&b=4&B=two%20words' is converted to r.args as: {a: "1", b: ["2", "4"], A: "3", B: "two words"} Learn more about njs: - Overview and introduction: https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code: https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html Feel free to try it and give us feedback on: - Github: https://github.com/nginx/njs/issues - Mailing list: https://mailman.nginx.org/mailman/listinfo/nginx-devel Additional examples and howtos can be found here: - Github: https://github.com/nginx/njs-examples Changes with njs 0.7.6 19 Jul 2022 nginx modules: *) Feature: improved r.args object. Added support for multiple arguments with the same key. Added case sensitivity for keys. Keys and values are percent-decoded now. *) Bugfix: fixed r.headersOut setter for special headers. Core: *) Feature: added Symbol.for() and Symbol.keyfor(). *) Feature: added btoa() and atob() from WHATWG spec. *) Bugfix: fixed large non-decimal literals. *) Bugfix: fixed unicode argument trimming in parseInt(). *) Bugfix: fixed break instruction in a try-catch block. *) Bugfix: fixed async function declaration in CLI. _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Tue Aug 30 23:00:50 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Tue, 30 Aug 2022 16:00:50 -0700 Subject: [nginx-announce] njs-0.7.7 Message-ID: Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). Notable new features: - advances fs API: New API allows to open a file and read from and write to at specified location without reading the whole file. import fs from 'fs'; async function modifying_large_file() { let fh = await fs.promises.open('/my/path'); let buf = Buffer.alloc(4); await fh.read(buf, 0, 4, 64); console.log(`read ${buf.toString('hex')}`); // modify part buf[0] = buf[0] ^ buf[3]; await fh.write(buf, 0, 4, 64); console.log(`written ${buf.toString('hex')}`); await fh.close(); } Learn more about njs: - Overview and introduction: https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code: https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html Feel free to try it and give us feedback on: - Github: https://github.com/nginx/njs/issues - Mailing list: https://mailman.nginx.org/mailman/listinfo/nginx-devel Additional examples and howtos can be found here: - Github: https://github.com/nginx/njs-examples Changes with njs 0.7.7 30 Aug 2022 nginx modules: *) Feature: the number of nginx configuration contexts where js directives can be specified is extended. HTTP: js_import, js_path, js_set and js_var are allowed in server and location contexts. js_content, js_body_filter and js_header_filter are allowed in 'if' context. Stream: js_import, js_path, js_set and js_var are allowed in server context. *) Feature: added r.internal property. *) Bugfix: fixed reading response body in fetch API. *) Bugfix: fixed "js_fetch_timeout" in stream module. *) Bugfix: fixed socket leak with 0 fetch timeout. Core: *) Feature: extended "fs" module. Added fs.openSync(), fs.promises.open(), fs.fstatSync(), fs.readSync(), fs.writeSync(). The following properties of FileHandle are implemented: fd, read(), stat(), write(), close(). *) Bugfix: fixed parseInt(), parseFloat(), Symbol.for() with no arguments. _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From mdounin at mdounin.ru Wed Oct 19 12:10:51 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Wed, 19 Oct 2022 15:10:51 +0300 Subject: [nginx-announce] nginx-1.22.1 Message-ID: Changes with nginx 1.22.1 19 Oct 2022 *) Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash, worker process memory disclosure, or might have potential other impact (CVE-2022-41741, CVE-2022-41742). -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From mdounin at mdounin.ru Wed Oct 19 12:11:28 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Wed, 19 Oct 2022 15:11:28 +0300 Subject: [nginx-announce] nginx security advisory (CVE-2022-41741, CVE-2022-41742) Message-ID: Hello! Two security issues were identified in the ngx_http_mp4_module, which might allow an attacker to cause a worker process crash or worker process memory disclosure by using a specially crafted mp4 file, or might have potential other impact (CVE-2022-41741, CVE-2022-41742). The issues only affect nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the "mp4" directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module. The issues affect nginx 1.1.3+, 1.0.7+. The issues are fixed in 1.23.2, 1.22.1. Patch for the issues can be found here: http://nginx.org/download/patch.2022.mp4.txt -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From mdounin at mdounin.ru Wed Oct 19 12:10:21 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Wed, 19 Oct 2022 15:10:21 +0300 Subject: [nginx-announce] nginx-1.23.2 Message-ID: Changes with nginx 1.23.2 19 Oct 2022 *) Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash, worker process memory disclosure, or might have potential other impact (CVE-2022-41741, CVE-2022-41742). *) Feature: the "$proxy_protocol_tlv_..." variables. *) Feature: TLS session tickets encryption keys are now automatically rotated when using shared memory in the "ssl_session_cache" directive. *) Change: the logging level of the "bad record type" SSL errors has been lowered from "crit" to "info". Thanks to Murilo Andrade. *) Change: now when using shared memory in the "ssl_session_cache" directive the "could not allocate new session" errors are logged at the "warn" level instead of "alert" and not more often than once per second. *) Bugfix: nginx/Windows could not be built with OpenSSL 3.0.x. *) Bugfix: in logging of the PROXY protocol errors. Thanks to Sergey Brester. *) Workaround: shared memory from the "ssl_session_cache" directive was spent on sessions using TLS session tickets when using TLSv1.3 with OpenSSL. *) Workaround: timeout specified with the "ssl_session_timeout" directive did not work when using TLSv1.3 with OpenSSL or BoringSSL. -- Maxim Dounin http://nginx.org/ _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Tue Oct 25 17:27:13 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Tue, 25 Oct 2022 10:27:13 -0700 Subject: [nginx-announce] njs-0.7.8 Message-ID: Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). Notable new features: - js_preload_object directive: The directive preloads an immutable object at configure time. This significantly reduces the runtime cost of referencing large objects in JS code. Learn more about njs: - Overview and introduction: https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code: https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html Feel free to try it and give us feedback on: - Github: https://github.com/nginx/njs/issues - Mailing list: https://mailman.nginx.org/mailman/listinfo/nginx-devel Additional examples and howtos can be found here: - Github: https://github.com/nginx/njs-examples Changes with njs 0.7.8 25 Oct 2022 nginx modules: *) Feature: added js_preload_object directive. *) Feature: added ngx.conf_prefix property. *) Feature: added s.sendUpstream() and s.sendDownstream() in stream module. *) Feature: added support for HEAD method in Fetch API. *) Improvement: improved async callback support for s.send() in stream module. Core: *) Feature: added "name" instance property for a function object. *) Feature: added njs.memoryStats object. *) Bugfix: fixed String.prototype.trimEnd() with unicode string. *) Bugfix: fixed Object.freeze() with fast arrays. *) Bugfix: fixed Object.defineProperty() with fast arrays. *) Bugfix: fixed async token as a property name of an object. *) Bugfix: fixed property set instruction when key modifies base binding. *) Bugfix: fixed complex assignments. *) Bugfix: fixed handling of unhandled promise rejection. *) Bugfix: fixed process.env when duplicate environ variables are present. *) Bugfix: fixed double declaration detection in modules. *) Bugfix: fixed bound function calls according to the spec. *) Bugfix: fixed break label for if statement. *) Bugfix: fixed labeled empty statements. _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From xeioex at nginx.com Fri Nov 18 02:02:24 2022 From: xeioex at nginx.com (Dmitry Volyntsev) Date: Thu, 17 Nov 2022 18:02:24 -0800 Subject: [nginx-announce] njs-0.7.9 Message-ID: Hello, This is a bugfix release that fixes Fetch Response prototype reinitialization. When at least one js_import directive was declared in both HTTP and Stream, ngx.fetch() returned inapproriate response in Stream. The bug was introduced in 0.7.7. Learn more about njs: - Overview and introduction: https://nginx.org/en/docs/njs/ - NGINX JavaScript in Your Web Server Configuration: https://youtu.be/Jc_L6UffFOs - Extending NGINX with Custom Code: https://youtu.be/0CVhq4AUU7M - Using node modules with njs: https://nginx.org/en/docs/njs/node_modules.html - Writing njs code using TypeScript definition files: https://nginx.org/en/docs/njs/typescript.html Feel free to try it and give us feedback on: - Github: https://github.com/nginx/njs/issues - Mailing list: https://mailman.nginx.org/mailman/listinfo/nginx-devel Additional examples and howtos can be found here: - Github: https://github.com/nginx/njs-examples Changes with njs 0.7.9 17 Nov 2022 nginx modules: *) Bugfix: fixed Fetch Response prototype reinitialization. When at least one js_import directive was declared in both HTTP and Stream, ngx.fetch() returned inapproriate response in Stream. The bug was introduced in 0.7.7. Core: *) Bugfix: fixed String.prototype.replace(re) if re.exec() returns non-flat array. *) Bugfix: fixed Array.prototype.fill() when start object changes "this". *) Bugfix: fixed description for fs.mkdir() and fs.rmdir() methods. *) Bugfix: fixed %TypedArray%.prototype.set(s) when s element changes "this". *) Bugfix: fixed Array.prototype.splice(s, d) when d resizes "this" during evaluation. *) Bugfix: fixed for-in loop with left and right hand side expressions. _______________________________________________ nginx-announce mailing list -- nginx-announce at nginx.org To unsubscribe send an email to nginx-announce-leave at nginx.org From mdounin at mdounin.ru Tue Dec 13 17:14:48 2022 From: mdounin at mdounin.ru (Maxim Dounin) Date: Tue, 13 Dec 2022 20:14:48 +0300 Subject: [nginx-announce] nginx-1.23.3 Message-ID: Changes with nginx 1.23.3 13 Dec 2022 *) Bugfix: an error might occur when reading PROXY protocol version 2 header with large number of TLVs. *) Bugfix: a segmentation fault might occur in a worker process if SSI was used to process subrequests created by other modules. Thanks to Ciel Zhao. *) Workaround: when a hostname used in the "listen" directive resolves to multiple addresses, nginx now ignores duplicates within these addresses. *) Bugfix: nginx might hog CPU during unbuffered proxying if SSL connections to backends were used. -- Maxim Dounin http://nginx.org/