Path to this page:
Subject: CVS commit: pkgsrc/www/nginx
From: Nia Alarie
Date: 2018-11-16 01:26:19
Message id: 20181116002619.3398CFB1F@cvs.NetBSD.org
Log Message:
www/nginx: Update to nginx-1.14.1
Changes with nginx 1.14.1 06 Nov 2018
*) Security: when using HTTP/2 a client might cause excessive memory
consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).
*) Security: processing of a specially crafted mp4 file with the
ngx_http_mp4_module might result in worker process memory disclosure
(CVE-2018-16845).
*) Bugfix: working with gRPC backends might result in excessive memory
consumption.
Files: