[nginx-announce] nginx-1.15.6

[Kevin Worthington]

 Hello Nginx users,

Now available: Nginx 1.15.6 for Windows
https://kevinworthington.com/nginxwin1156 (32-bit and 64-bit versions)

These versions are to support legacy users who are already using Cygwin
based builds of Nginx. Officially supported native Windows binaries are at
nginx.org.

Announcements are also available here:
Twitter http://twitter.com/kworthington
Google+ https://plus.google.com/+KevinWorthington/

Thank you,
Kevin
--
Kevin Worthington
kworthington *@* (gmail]  [dot} {com)
https://kevinworthington.com/
https://twitter.com/kworthington
https://plus.google.com/+KevinWorthington/

On Tue, Nov 6, 2018 at 10:27 AM Maxim Dounin <mdounin at mdounin.ru> wrote:

> Changes with nginx 1.15.6                                        06 Nov
> 2018
>
>     *) Security: when using HTTP/2 a client might cause excessive memory
>        consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).
>
>     *) Security: processing of a specially crafted mp4 file with the
>        ngx_http_mp4_module might result in worker process memory disclosure
>        (CVE-2018-16845).
>
>     *) Feature: the "proxy_socket_keepalive", "fastcgi_socket_keepalive",
>        "grpc_socket_keepalive", "memcached_socket_keepalive",
>        "scgi_socket_keepalive", and "uwsgi_socket_keepalive" directives.
>
>     *) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL
>        1.1.1, the TLS 1.3 protocol was always enabled.
>
>     *) Bugfix: working with gRPC backends might result in excessive memory
>        consumption.
>
>
> --
> Maxim Dounin
> http://nginx.org/
> _______________________________________________
> nginx-announce mailing list
> nginx-announce at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx-announce
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20181106/391481ce/attachment-0001.html>