/ Register

Want to subscribe to topics you're interested in?
Become a Member

Nginx [nginx-announce] nginx-1.12.1

Discussion in 'Nginx and PHP-FPM news & discussions' started by eva2000, Jul 12, 2017.

Previous Thread Next Thread
Loading...
  1. Jul 12, 2017 #1
    eva2000

    eva2000 Administrator Staff Member

    39,244
    8,656
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +13,311
    Local Time:
    9:57 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Changes with nginx 1.12.1 11 Jul 2017

    *) Security: a specially crafted request might result in an integer
    overflow and incorrect processing of ranges in the range filter,
    potentially resulting in sensitive information leak (CVE-2017-7529).


    --
    Maxim Dounin
    http://nginx.org/
    _______________________________________________
    nginx-announce mailing list
    [email protected]
    http://mailman.nginx.org/mailman/listinfo/nginx-announce

    Continue reading...
     
  2. Jul 12, 2017 #2
    bassie

    bassie Well-Known Member

    1,061
    255
    83
    Apr 29, 2016
    Ratings:
    +762
    Local Time:
    1:57 AM
    Useless release.
    In no way the advertised changes.

     
  3. Jul 12, 2017 #3
    eva2000

    eva2000 Administrator Staff Member

    39,244
    8,656
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +13,311
    Local Time:
    9:57 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Last edited: Jul 12, 2017
  4. Jul 12, 2017 #4
    bassie

    bassie Well-Known Member

    1,061
    255
    83
    Apr 29, 2016
    Ratings:
    +762
    Local Time:
    1:57 AM
    Sure security is important.
    But Nginx released 1.12.0, 3 months ago.
    Time enough to port fixes from 1.13 to 1.12.
     
  5. Jul 12, 2017 #5
    eva2000

    eva2000 Administrator Staff Member

    39,244
    8,656
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +13,311
    Local Time:
    9:57 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    From what I gather Nginx don't port all fixes from mainline to stable only critical ones. It's why Nginx officially recommends using Nginx mainline releases and hence why Centmin Mod uses mainline = 1.13 :)

    IIRC, there's a 12 month interval/cycle for mainline to stable porting.
     
  6. Jul 12, 2017 #6
    bassie

    bassie Well-Known Member

    1,061
    255
    83
    Apr 29, 2016
    Ratings:
    +762
    Local Time:
    1:57 AM
  7. Jul 12, 2017 #7
    eva2000

    eva2000 Administrator Staff Member

    39,244
    8,656
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +13,311
    Local Time:
    9:57 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Yes IIRC, they did that at the 12 month cycle mark when 1.9.x mainline went to 1.10 stable and mainline moved to 1.11 branch Nginx - New Nginx 1.10 and 1.11 releases announced

    So you will probably see the next major backport when 1.13 mainline becomes 1.14 stable and mainline moves to 1.15 branch. Basically, don't expect to see all current 1.13 mainline features and bug fixes in 1.12 stable. If you want stable, you need to wait for when Nginx 1.14 stable is out at which time Centmin Mod Nginx moves to 1.15 mainline from 1.13 mainline :)
     
    Last edited: Jul 12, 2017
Previous Thread Next Thread
Loading...
..

.