HomeFreeBSD

www/nginx-devel: security update 1.27.0 -> 1.27.1

Description

www/nginx-devel: security update 1.27.0 -> 1.27.1

<ChangeLog>

*) Security: processing of a specially crafted mp4 file by the

ngx_http_mp4_module might cause a worker process crash
(CVE-2024-7347).
Thanks to Nils Bars.

*) Change: now the stream module handler is not mandatory.

*) Bugfix: new HTTP/2 connections might ignore graceful shutdown of old

worker processes.
Thanks to Kasei Wang.

*) Bugfixes in HTTP/3.

</ChangeLog>

Details

Provenance
osaAuthored on Aug 22 2024, 1:34 AM
Parents
R11:14dc2636e72c: security/vuxml: document buffer overread vulnerability in nginx
Branches
Unknown
Tags
Unknown