mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-27 17:33:09 +00:00
25e4a15f2a
Fixes CVE-2024-32760, CVE-2024-31079, CVE-2024-35200 and CVE-2024-34161.
Note that the `nginxQuic` derivation rely on `nginxMainline`.
Changes:
```
Changes with nginx 1.26.1 29 May 2024
*) Security: when using HTTP/3, processing of a specially crafted QUIC
session might cause a worker process crash, worker process memory
disclosure on systems with MTU larger than 4096 bytes, or might have
potential other impact (CVE-2024-32760, CVE-2024-31079,
CVE-2024-35200, CVE-2024-34161).
Thanks to Nils Bars of CISPA.
*) Bugfix: reduced memory consumption for long-lived requests if "gzip",
"gunzip", "ssi", "sub_filter", or "grpc_pass" directives are used.
*) Bugfix: nginx could not be built by gcc 14 if the --with-atomic
option was used.
Thanks to Edgar Bonet.
*) Bugfix: in HTTP/3.
```
|
||
|---|---|---|
| .. | ||
| angie | ||
| apache-httpd | ||
| apache-modules | ||
| apt-cacher-ng | ||
| bozohttpd | ||
| cgiserver | ||
| couchdb | ||
| darkhttpd | ||
| dave | ||
| dufs | ||
| envoy | ||
| gatling | ||
| h2o | ||
| hiawatha | ||
| hyp | ||
| jboss | ||
| jetty | ||
| lighttpd | ||
| lwan | ||
| merecat | ||
| micro-httpd | ||
| mini-httpd | ||
| nginx | ||
| nix-binary-cache | ||
| openresty | ||
| pomerium | ||
| pshs | ||
| quark | ||
| ran | ||
| redstore | ||
| router | ||
| showoff | ||
| spawn-fcgi | ||
| tengine | ||
| thttpd | ||
| tomcat | ||
| trafficserver | ||
| unit | ||
| webfs | ||
| webhook | ||
| yaws | ||