details: http://hg.nginx.org/nginx/rev/0cf84a39c1db branches: stable-1.6 changeset: 5796:0cf84a39c1db user: Maxim Dounin <[email protected]> date: Tue Aug 05 15:18:34 2014 +0400 description: nginx-1.6.1-RELEASE
diffstat: docs/xml/nginx/changes.xml | 46 ++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 46 insertions(+), 0 deletions(-) diffs (56 lines): diff --git a/docs/xml/nginx/changes.xml b/docs/xml/nginx/changes.xml --- a/docs/xml/nginx/changes.xml +++ b/docs/xml/nginx/changes.xml @@ -5,6 +5,52 @@ <change_log title="nginx"> +<changes ver="1.6.1" date="05.08.2014"> + +<change type="security"> +<para lang="ru"> +pipelined-команды не отбрасывались +после команды STARTTLS в SMTP прокси-сервере (CVE-2014-3556); +ошибка появилась в 1.5.6.<br/> +Спасибо Chris Boulton. +</para> +<para lang="en"> +pipelined commands were not discarded +after STARTTLS command in SMTP proxy (CVE-2014-3556); +the bug had appeared in 1.5.6.<br/> +Thanks to Chris Boulton. +</para> +</change> + +<change type="bugfix"> +<para lang="ru"> +переменная $uri могла содержать мусор +при возврате ошибок с кодом 400.<br/> +Спасибо Сергею Боброву. +</para> +<para lang="en"> +the $uri variable might contain garbage +when returning errors with code 400.<br/> +Thanks to Sergey Bobrov. +</para> +</change> + +<change type="bugfix"> +<para lang="ru"> +в работе параметра none директивы smtp_auth; +ошибка появилась в 1.5.6.<br/> +Спасибо Святославу Никольскому. +</para> +<para lang="en"> +in the "none" parameter in the "smtp_auth" directive; +the bug had appeared in 1.5.6.<br/> +Thanks to Svyatoslav Nikolsky. +</para> +</change> + +</changes> + + <changes ver="1.6.0" date="24.04.2014"> <change> _______________________________________________ nginx-devel mailing list [email protected] http://mailman.nginx.org/mailman/listinfo/nginx-devel
