Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
Bump PKGREVISION for www/nginx and www/nginx-devel.
<ChangeLog>
nginx modules:
*) Bugfix: fixed Fetch Response prototype reinitialization.
When at least one js_import directive was declared in both HTTP
and Stream, ngx.fetch() returned inapproriate response in Stream.
The bug was introduced in 0.7.7.
Core:
*) Bugfix: fixed String.prototype.replace(re) if re.exec() returns
non-flat array.
*) Bugfix: fixed Array.prototype.fill() when start object changes
"this".
*) Bugfix: fixed description for fs.mkdir() and fs.rmdir() methods.
*) Bugfix: fixed %TypedArray%.prototype.set(s) when s element changes
"this".
*) Bugfix: fixed Array.prototype.splice(s, d) when d resizes "this"
during evaluation.
*) Bugfix: fixed for-in loop with left and right hand side
expressions.
</ChangeLog>
|
|
Bump PKGREVISION for www/nginx and www/nginx-devel.
<ChangeLog>
nginx modules:
*) Feature: added js_preload_object directive.
*) Feature: added ngx.conf_prefix property.
*) Feature: added s.sendUpstream() and s.sendDownstream()
in stream module.
*) Feature: added support for HEAD method in Fetch API.
*) Improvement: improved async callback support for s.send()
in stream module.
Core:
*) Feature: added "name" instance property for a function
object.
*) Feature: added njs.memoryStats object.
*) Bugfix: fixed String.prototype.trimEnd() with unicode
string.
*) Bugfix: fixed Object.freeze() with fast arrays.
*) Bugfix: fixed Object.defineProperty() with fast arrays.
*) Bugfix: fixed async token as a property name of an object.
*) Bugfix: fixed property set instruction when key modifies
base binding.
*) Bugfix: fixed complex assignments.
*) Bugfix: fixed handling of unhandled promise rejection.
*) Bugfix: fixed process.env when duplicate environ variables
are present.
*) Bugfix: fixed double declaration detection in modules.
*) Bugfix: fixed bound function calls according to the spec.
*) Bugfix: fixed break label for if statement.
*) Bugfix: fixed labeled empty statements.
</ChangeLog>
|
|
<ChangeLog>
*) Security: processing of a specially crafted mp4 file by the
ngx_http_mp4_module might cause a worker process crash, worker
process memory disclosure, or might have potential other impact
(CVE-2022-41741, CVE-2022-41742).
</ChangeLog>
|
|
ChangeLog: https://github.com/openresty/lua-nginx-module/compare/v0.10.21...v0.10.22
Bump PKGREVISIONs.
|
|
Bump PKGREVISION for www/nginx and www/nginx-devel.
<ChangeLog>
nginx modules:
*) Feature: the number of nginx configuration contexts where
js directives can be specified is extended.
HTTP: js_import, js_path, js_set and js_var are allowed
in server and location contexts. js_content, js_body_filter
and js_header_filter are allowed in 'if' context.
Stream: js_import, js_path, js_set and js_var are allowed
in server context.
*) Feature: added r.internal property.
*) Bugfix: fixed reading response body in fetch API.
*) Bugfix: fixed "js_fetch_timeout" in stream module.
*) Bugfix: fixed socket leak with 0 fetch timeout.
Core:
*) Feature: extended "fs" module. Added fs.openSync(),
fs.promises.open(), fs.fstatSync(), fs.readSync(),
fs.writeSync().
The following properties of FileHandle are implemented:
fd, read(), stat(), write(), close().
*) Bugfix: fixed parseInt(), parseFloat(), Symbol.for()
with no arguments.
</ChangeLog>
|
|
Bump PKGREVISION for www/nginx.
<ChangeLog>
nginx modules:
*) Feature: improved r.args object. Added support for multiple
arguments with the same key. Added case sensitivity for
keys. Keys and values are percent-decoded now.
*) Bugfix: fixed r.headersOut setter for special headers.
Core:
*) Feature: added Symbol.for() and Symbol.keyfor().
*) Feature: added btoa() and atob() from WHATWG spec.
*) Bugfix: fixed large non-decimal literals.
*) Bugfix: fixed unicode argument trimming in parseInt().
*) Bugfix: fixed break instruction in a try-catch block.
*) Bugfix: fixed async function declaration in CLI.
</ChangeLog>
|
|
|
|
o) http_push from 1.2.15 to 1.3.0, [1]
o) geoip2 from 3.3 to 3.4, [2]
References:
1. https://github.com/slact/nchan/compare/v1.2.15...v1.3.0
2. https://github.com/leev/ngx_http_geoip2_module/compare/3.3...3.4
Bump PKGREVISION.
|
|
Fix PLIST for the third-party upload module.
Bump PKGREVISION.
|
|
|
|
The third-party upload module has been add to www/nginx-devel.
Merge pcre/pcre2 functional from www/nginx-devel to www/nginx.
I'm going to review patches for the both ports.
Bump PKGREVISIONs.
|
|
Also, update third-party modules:
o) http_push from 1.2.12 to 1.2.15
o) lua from 0.10.20 to 0.10.21
o) njs from 0.7.3 to 0.7.4
|
|
more dependencies or distfiles.
|
|
|
|
not enable by default, no PKGREVISION bump
|
|
|
|
Bump PKGREVISION.
<ChangeLog>
Core:
*) Feature: added support of module resolution callback.
This feature allows a host environment to control
how imported modules are loaded.
*) Bugfix: fixed backtraces while traversing imported user
modules.
*) Bugfix: fixed Array.prototype.concat() when "this" is a slow
array.
*) Bugfix: fixed frame allocation from an awaited frame.
*) Bugfix: fixed allocation of large array literals.
*) Bugfix: fixed interpreter when "toString" conversion fails.
</ChangeLog>
|
|
|
|
The --with-pcre-jit configure option helps to build PCRE library with
JIT feature only, and it doesn't help when PCRE library is already
built without JIT support.
Bump PKGREVISION.
|
|
The new and shiny lang/njs package will be added shortly.
Bump PKGREVISIONs.
|
|
Also, move NGINX JavaScript (njs) configure phase out of the NGINX build
phase.
Bump PKGREVISIONs.
|
|
It's possible now to build an additional module as a dynamic module.
Bump PKGREVISION.
While I'm here take over the maintainership for www/nginx (*).
Approved by: joerg (*)
|
|
Discussed with: gutteridge
|
|
o) encrypted-session-nginx from 0.08 to 0.09;
o) http_push from 1.2.10 to 1.2.12;
o) lua from 0.10.19 to 0.10.20;
o) njs from 0.5.0 to 0.7.2;
o) set-misc from 0.32 to 0.33.
|
|
|
|
Changes with nginx 1.20.2 16 Nov 2021
*) Feature: OpenSSL 3.0 compatibility.
*) Bugfix: SSL variables might be empty when used in logs; the bug had
appeared in 1.19.5.
*) Bugfix: keepalive connections with gRPC backends might not be closed
after receiving a GOAWAY frame.
*) Bugfix: backend SSL connections in the stream module might hang after
an SSL handshake.
*) Bugfix: SSL connections with gRPC backends might hang if select,
poll, or /dev/poll methods were used.
*) Bugfix: in the $content_length variable when using chunked transfer
encoding.
*) Bugfix: requests might hang when using HTTP/2 and the "aio_write"
directive.
|
|
|
|
This takes advantage of the introduction of the SYSCONFBASE variable.
Tested on NetBSD/amd64.
Bumps PKGREVISION.
|
|
|
|
1.2.10 (Aug. 25 2021)
fix: Nchan could not be built without openssl due to hiredis dependency
(introduced in v1.2.9)
feature: allow no separator for http-raw-stream (thanks @sclem)
1.2.9 (Aug. 12 2021)
feature: Redis cluster reconfiguration check timer,
nchan_redis_cluster_check_interval setting
fix: detect Redis cluster reconfiguration when publishing messages in "nostore" mode
update: hiredis updated to v1.0.0
fix: segfault on out-of-shared-memory condition for multiplexed publishers
|
|
Changes with nginx 1.20.1
*) Security: 1-byte memory overwrite might occur during DNS server
response processing if the "resolver" directive was used, allowing an
attacker who is able to forge UDP packets from the DNS server to
cause worker process crash or, potentially, arbitrary code execution
(CVE-2021-23017).
nginx-rtmp-module v1.2.2:
Fixed segfaults.
|
|
|
|
Changes with nginx 1.20.0
*) 1.20.x stable branch.
|
|
|
|
1.2.8 (Apr. 12 2021)
feature: nchan_subscriber_info locations for receiving customizable info from
subscribers of a given channel.
fix: incorrect lgging of disconnected subscribers with 400 error instead of 499
(bug introduced in v1.2.7)
feature: add $nchan_channel_subscriber_last_seen, $nchan_channel_subscriber_count
and $nchan_channel_message_count variables
fix: GCC 10 compatibility
|
|
|
|
Changes for naxsi 1.3:
- Fixed regression on FILE_EXT confusion
- Documented id 19 and 20 to rules
|
|
Changelog:
* nginx modules:
*) Feature: introduced global "ngx" object.
The following methods were added:
ngx.log(level, msg)
The following properties were added:
ngx.INFO,
ngx.WARN,
ngx.ERR.
*) Feature: added support for Buffer object where string
is expected.
*) Feature: added Buffer version of existing properties.
The following properties were added:
r.requestBuffer (r.requestBody),
r.responseBuffer (r.responseBody),
r.rawVariables (r.variables),
s.rawVariables (s.variables).
The following events were added in stream module:
upstream (upload),
downstream (download).
*) Improvement: added aliases to existing properties.
The following properties were added:
r.requestText (r.requestBody),
r.responseText (r.responseBody).
*) Improvement: throwing an exception in r.internalRedirect()
for a subrequest.
*) Bugfix: fixed promise r.subrequest() with error_page redirect.
*) Bugfix: fixed promise events handling.
* Core:
*) Feature: added TypeScript definitions for built-in
modules.
Thanks to Jakub Jirutka.
*) Feature: tracking unhandled promise rejection.
*) Feature: added initial iterator support.
Thanks to Artem S. Povalyukhin.
*) Improvement: TypeScript definitions are refactored.
Thanks to Jakub Jirutka.
*) Improvement: added forgotten support for
Object.prototype.valueOf() in Buffer.from().
*) Bugfix: fixed heap-use-after-free in JSON.parse().
*) Bugfix: fixed heap-use-after-free in JSON.stringify().
*) Bugfix: fixed JSON.stringify() for arrays resizable via
getters.
*) Bugfix: fixed heap-buffer-overflow for
RegExp.prototype[Symbol.replace].
*) Bugfix: fixed returned value for Buffer.prototype.write*
functions.
*) Bugfix: fixed querystring.stringify().
Thanks to Artem S. Povalyukhin.
*) Bugfix: fixed the catch handler for
Promise.prototype.finally().
*) Bugfix: fixed querystring.parse().
|
|
Submitted by Brian Ewell in joyent/pkgsrc#289, minor changes by myself.
|
|
|
|
|
|
|
|
|
|
Modules have been updated to the following versions:
- naxsi: 1.2
- lua: 0.10.17
- echo: 0.62
|
|
Upstream changes since 0.56:
1.0:
* Parse body of PATCH requests
* Scientific notation in json
* Log clarification
* Fixed country code when geoip library fail to get geolocation or ip is private/local address
* Fixed issues to setup nxapi on ES5 and added country location on stats and generated whitelists
1.1:
* Fixed various compilation issues
* Fixed valid JSON blocked by Rule ID 15
* Fixed documentation
* Updated libinjection to 3.9.2
* Added Content-type: application/vnd.api+json
* Added JSON logging output for events
* Implemented Whitelist for IPs and CIDRs and support for IPv4 and IPv6
1.1a:
* Fixed 3 vulnerabilities related to the WAF.
* Fixed build on FreeBSD
|
|
Release Date: 29 September 2020
* nginx modules:
- Bugfix: fixed location merge.
- Bugfix: fixed r.httpVersion for HTTP/2.
* Core:
- Feature: added support for numeric separators (ES12).
- Feature: added remaining methods for %TypedArray%.prototype. The following
methods were added: every(), filter(), find(), findIndex(), forEach(),
includes(), indexOf(), lastIndexOf(), map(), reduce(), reduceRight(),
reverse(), some().
- Feature: added %TypedArray% remaining methods. The following methods were added: from(), of().
- Feature: added DataView object.
- Feature: added Buffer object implementation.
- Feature: added support for ArrayBuffer in TextDecoder.prototype.decode()
- Feature: added support for Buffer object in crypto methods.
- Feature: added support for Buffer object in fs methods.
- Change: Hash.prototype.digest() and Hmac.prototype.digest() now return a
Buffer instance instead of a byte string when encoding is not provided.
- Change: fs.readFile() and friends now return a Buffer instance instead of a
byte string when encoding is not provided.
- Bugfix: fixed function prototype property handler while setting.
- Bugfix: fixed function constructor property handler while setting.
- Bugfix: fixed String.prototype.indexOf() for byte strings.
- Bugfix: fixed RegExpBuiltinExec() with a global flag and byte strings.
- Bugfix: fixed RegExp.prototype[Symbol.replace] the when replacement value is a
function.
- Bugfix: fixed TextDecoder.prototype.decode() with non-zero TypedArray offset.
|
|
|
|
njs is a subset of the JavaScript language that allows extending nginx
functionality. njs is created in compliance with ECMAScript 5.1 (strict mode)
with some ECMAScript 6 and later extensions.
|
|
|