NGINX is a high performance edge web server with the lowest memory footprint
and the key features to build modern and efficient web infrastructure.
NGINX functionality includes HTTP server, HTTP and mail reverse proxy, caching,
load balancing, compression, request throttling, connection multiplexing and
reuse, SSL offload and HTTP media streaming.
See also: https://nginx.org/
Reason:
Following the rename of security/openssl35 to security/openssl, the
HTTPV3_OSSL35 option has been renamed to HTTPV3_OSSL.
The saved setting does not carry over. If you had the old option
enabled, select the new one and rebuild the port:
# make -C /usr/ports/www/nginx-devel config
Number of commits found: 1303 (showing only 100 on this page) #
Security update from 1.5.11 to 1.5.12.
<ChangeLog>
*) Security: a heap memory buffer overflow might occur in a worker
process while handling a specially crafted request by
ngx_http_spdy_module, potentially resulting in arbitrary code
execution (CVE-2014-0133).
Thanks to Lucas Molas, researcher at Programa STIC, Fundacion Dr.
Manuel Sadosky, Buenos Aires, Argentina.
*) Feature: the "proxy_protocol" parameters of the "listen" and
"real_ip_header" directives, the $proxy_protocol_addr variable.
*) Bugfix: in the "fastcgi_next_upstream" directive.
Thanks to Lucas Molas.
</ChangeLog>
Update from 1.5.10 to 1.5.11.
<ChangeLog>
*) Security: memory corruption might occur in a worker process on 32-bit
platforms while handling a specially crafted request by
ngx_http_spdy_module, potentially resulting in arbitrary code
execution (CVE-2014-0088); the bug had appeared in 1.5.10.
Thanks to Lucas Molas, researcher at Programa STIC, Fundacion Dr.
Manuel Sadosky, Buenos Aires, Argentina.
*) Feature: the $ssl_session_reused variable.
*) Bugfix: the "client_max_body_size" directive might not work when
reading a request body using chunked transfer encoding; the bug had
(Only the first 15 lines of the commit message are shown above )
Update from 1.5.8 to 1.5.10.
Disable third-party ctpp2 module.
<ChangeLog>
Changes with nginx 1.5.10 04 Feb 2014
*) Feature: the ngx_http_spdy_module now uses SPDY 3.1 protocol.
Thanks to Automattic and MaxCDN for sponsoring this work.
*) Feature: the ngx_http_mp4_module now skips tracks too short for a
seek requested.
*) Bugfix: a segmentation fault might occur in a worker process if the
$ssl_session_id variable was used in logs; the bug had appeared in
(Only the first 15 lines of the commit message are shown above )
Update from 1.5.7 to 1.5.8.
<ChangeLog>
*) Feature: IPv6 support in resolver.
*) Feature: the "listen" directive supports the "fastopen" parameter.
Thanks to Mathew Rodley.
*) Feature: SSL support in the ngx_http_uwsgi_module.
Thanks to Roberto De Ioris.
*) Feature: vim syntax highlighting scripts were added to contrib.
Thanks to Evan Miller.
(Only the first 15 lines of the commit message are shown above )
Update from 4.0.30 to 4.0.33:
o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.
<ChangeLog>
Release 4.0.33
--------------
* Fixed a compatibility problem in passenger-install-apache2-module with Ruby
1.8.
The language selection menu didn't work properly.
Release 4.0.32
--------------
(Only the first 15 lines of the commit message are shown above )
Update from 4.0.29 to 4.0.30:
o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.
<ChangeLog>
* Fixed wrong autogeneration of HTTP Date header. If the web app does
not supply a Date header, then Passenger will add one. Unfortunately
due to the use of the wrong format string, December 30 2013 is
formatted as December 30 2014. As a result, cookies that expire before
2014 would expire on December 30 2013 and December 31 2013. Details can
be found at [Github pull request
93](https://github.com/phusion/passenger/pull/93).
This issue only affects Phusion Passenger for Nginx and Phusion Passenger
(Only the first 15 lines of the commit message are shown above )
Update from 4.0.27 to 4.0.29:
o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.
<ChangeLog>
Release 4.0.29
--------------
* Fixed a compilation problem on OS X Mavericks.
Release 4.0.28
--------------
(Only the first 15 lines of the commit message are shown above )
Update from 4.0.26 to 4.0.27:
o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.
<ChangeLog>
* [Apache] Fixed a bug in the Apache module which could lock up the Apache
process or thread. This is a regression introduced in version 4.0.24.
* Node.js application processes now have friendly process titles.
</ChangeLog>
Upgrade third-party ngx_http_redis module from 0.3.6 to 0.3.7.
<ChangeLog>
*) Bugfix: ngx_http_redis_module might issue the error message
"redis sent invalid trailer" for nginx >= 1.5.3.
Thanks to Maxim Dounin.
</ChangeLog>
Update from 4.0.25 to 4.0.26:
o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.
<ChangeLog>
* Introduced the `PassengerBufferUpload` option for Apache. This option allows
one
to disable upload buffering, e.g. in order to be able to track upload
progress.
* [Nginx] The `HTTPS` variable is now set correctly for HTTPS connections, even
without setting `ssl on`. Fixes issue #401.
* [Standalone] It is now possible to listen on both a normal HTTP and an HTTPS
port.
* [Enterprise] The `passenger-status` tool now displays rolling restart status.
</ChangeLog>
Update from 4.0.23 to 4.0.24:
o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.
Try to fix build www/rubygem-passenger with upcoming FreeBSD 10.
Security update from 1.5.6 to 1.5.7.
<ChangeLog>
*) Security: a character following an unescaped space in a request line
was handled incorrectly (CVE-2013-4547); the bug had appeared in
0.8.41.
Thanks to Ivan Fratric of the Google Security Team.
*) Change: a logging level of auth_basic errors about no user/password
provided has been lowered from "error" to "info".
*) Feature: the "proxy_cache_revalidate", "fastcgi_cache_revalidate",
"scgi_cache_revalidate", and "uwsgi_cache_revalidate" directives.
(Only the first 15 lines of the commit message are shown above )
Update from 1.5.5 to 1.5.6.
<ChangeLog>
*) Feature: the "fastcgi_buffering" directive.
*) Feature: the "proxy_ssl_protocols" and "proxy_ssl_ciphers"
directives.
Thanks to Piotr Sikora.
*) Feature: optimization of SSL handshakes when using long certificate
chains.
*) Feature: the mail proxy supports SMTP pipelining.
(Only the first 15 lines of the commit message are shown above )
Update from 1.5.4 to 1.5.5.
Remove needless entries for ngx_http_auth_request_module from distinfo, the
module is the part of main distro.
<ChangeLog>
*) Change: now nginx assumes HTTP/1.0 by default if it is not able to
detect protocol reliably.
*) Feature: the "disable_symlinks" directive now uses O_PATH on Linux.
*) Feature: now nginx uses EPOLLRDHUP events to detect premature
connection close by clients if the "epoll" method is used.
*) Bugfix: in the "valid_referers" directive if the "server_names"
parameter was used.
*) Bugfix: the $request_time variable did not work in nginx/Windows.
*) Bugfix: in the "image_filter" directive.
Thanks to Lanshun Zhou.
*) Bugfix: OpenSSL 1.0.1f compatibility.
Thanks to Piotr Sikora.
</ChangeLog>
Update from 4.0.14 to 4.0.16:
o) www/rubygem-passenger;
o) third-party modules for www/nginx and www/nginx-devel.
Also, convert to perl framework nginx ports.
Update from 1.5.3 to 1.5.4.
<ChangeLog>
*) Change: the "js" extension MIME type has been changed to
"application/javascript"; default value of the "charset_types"
directive was changed accordingly.
*) Change: now the "image_filter" directive with the "size" parameter
returns responses with the "application/json" MIME type.
*) Feature: the ngx_http_auth_request_module.
*) Bugfix: a segmentation fault might occur on start or during
reconfiguration if the "try_files" directive was used with an empty
(Only the first 15 lines of the commit message are shown above )
Update third-party modules:
o) echo from 0.45 to 0.46;
o) headers-more from 0.20 to 0.22;
o) lua from 0.8.2 to 0.8.6;
o) rtmp from 1.0.2 to 1.0.3;
o) srcache from 0.21 to 0.22.
Update from 1.5.2 to 1.5.3.
Temporary ignore following third-party modules support:
o) HTTP_UPSTREAM_STICKY
o) DRIZZLE
o) POSTGRES
o) RTMP
o) SYSLOG
o) TCP_PROXY
<ChangeLog>
*) Change in internal API: now u->length defaults to -1 if working with
backends in unbuffered mode.
*) Change: now after receiving an incomplete response from a backend
(Only the first 15 lines of the commit message are shown above )
Update from 1.5.1 to 1.5.2.
Temporary ignore third-party syslog support.
<ChangeLog>
*) Feature: now several "error_log" directives can be used.
*) Bugfix: the $r->header_in() embedded perl method did not return value
of the "Cookie" and "X-Forwarded-For" request header lines; the bug
had appeared in 1.3.14.
*) Bugfix: in the ngx_http_spdy_module.
Thanks to Jim Radford.
*) Bugfix: nginx could not be built on Linux with x32 ABI.
Thanks to Serguei Ivantsov.
</ChangeLog>
Update from 1.5.0 to 1.5.1.
<ChangeLog>
*) Feature: the "ssi_last_modified", "sub_filter_last_modified", and
"xslt_last_modified" directives.
Thanks to Alexey Kolpakov.
*) Feature: the "http_403" parameter of the "proxy_next_upstream",
"fastcgi_next_upstream", "scgi_next_upstream", and
"uwsgi_next_upstream" directives.
*) Feature: the "allow" and "deny" directives now support unix domain
sockets.
(Only the first 15 lines of the commit message are shown above )
Security update to latest versions:
o) www/nginx from 1.4.0 to 1.4.1;
o) www/nginx-devel from 1.4.0 to 1.5.0.
<ChangeLog>
*) Security: a stack-based buffer overflow might occur in a worker
process while handling a specially crafted request, potentially
resulting in arbitrary code execution (CVE-2013-2028); the bug had
appeared in 1.3.9.
Thanks to Greg MacManus, iSIGHT Partners Labs.
</ChangeLog>
Update third-party modules:
o) echo from 0.42 to 0.45;
o) headers_more from 0.19 to 0.20;
o) push_stream from 0.3.4 to 03.5;
o) upsteam_sticky from 1.0 to 1.1;
o) encrypted_session from 0.02 to 0.03;
o) lua from 0.7.15 to 0.7.21;
o) redis2 from 0.09 to 0.10;
o) rtmp from 0.9.13 to 0.9.18;
o) srcache from 0.19 to 0.20;
o) iconv from 0.10rc7 to 0.10;
Submitted by: delphij via private mail
Update to latest stable version 1.4.0.
Merge changes from www/nginx-devel to www/nginx.
<ChangeLog>
*) Bugfix: nginx could not be built with the ngx_http_perl_module if the
--with-openssl option was used; the bug had appeared in 1.3.16.
*) Bugfix: in a request body handling in the ngx_http_perl_module; the
bug had appeared in 1.3.9.
</ChangeLog>
Update from 1.3.15 to 1.3.16.
Fix depends for third-party drizzle module.
Feature safe: yes
<ChangeLog>
*) Bugfix: a segmentation fault might occur in a worker process if
subrequests were used; the bug had appeared in 1.3.9.
*) Bugfix: the "tcp_nodelay" directive caused an error if a WebSocket
connection was proxied into a unix domain socket.
*) Bugfix: the $upstream_response_length variable has an incorrect value
"0" if buffering was not used.
Thanks to Piotr Sikora.
*) Bugfix: in the eventport and /dev/poll methods.
</ChangeLog>
Update from 1.3.14 to 1.3.15.
Remove SPDY patch, it has been incorporated into upstream.
<ChangeLog>
*) Change: opening and closing a connection without sending any data in
it is no longer logged to access_log with error code 400.
*) Feature: the ngx_http_spdy_module.
Thanks to Automattic for sponsoring this work.
*) Feature: the "limit_req_status" and "limit_conn_status" directives.
Thanks to Nick Marden.
*) Feature: the "image_filter_interlace" directive.
(Only the first 15 lines of the commit message are shown above )
Update third-party slowfs_cache module from 1.9 to 1.10.
Do not bump PORTREVISION.
<ChangeLog>
* Fix compatibility with nginx-1.1.12+.
Due to the changes in cache index usage accounting (1 per request
instead of 1 per access) initial cache insert of "small" file was
decreasing usage count, rendering index entry invalid.
Because cache manager ignores invalid entries, expired cache files
were not being removed from the cache, which forced it to outgrow
specified "max_size" value.
</ChangeLog>
Update from 1.3.13 to 1.3.14.
Update SPDY patch from version 65 to 66.
<ChangeLog>
*) Feature: $connections_active, $connections_reading, and
$connections_writing variables in the ngx_http_stub_status_module.
*) Feature: support of WebSocket connections in the
ngx_http_uwsgi_module and ngx_http_scgi_module.
*) Bugfix: in virtual servers handling with SNI.
*) Bugfix: new sessions were not always stored if the "ssl_session_cache
shared" directive was used and there was no free space in shared
memory.
Thanks to Piotr Sikora.
*) Bugfix: multiple X-Forwarded-For headers were handled incorrectly.
Thanks to Neal Poole for sponsoring this work.
*) Bugfix: in the ngx_http_mp4_module.
Thanks to Gernot Vormayr.
</ChangeLog>
Upgrade third-party modules (according to latest stable ngx_openresty-1.2.6.6):
o) echo from 0.41 to 0.42;
o) headers_more from 0.18 to 0.19;
o) lua from 0.6.10 to 0.7.15;
o) srcache from 0.16 to 0.19;
o) forminput from 0.07rc5 to 0.07.
Update from 1.3.12 to 1.3.13.
Update SPDY patch from version 61 to 65.
<ChangeLog>
*) Change: a compiler with name "cc" is now used by default.
*) Feature: support for proxying of WebSocket connections.
Thanks to Apcera and CloudBees for sponsoring this work.
*) Feature: the "auth_basic_user_file" directive supports "{SHA}"
password encryption method.
Thanks to Louis Opter.
</ChangeLog>
Update devel-kit third-party module from 0.2.17 to 0.2.18.
USE_NGINX_DEVEL_KIT internal knob has been deprecated.
Fix third-party modules build by change configure order.
Fix build with iconv third-party module. (*)
Do not bump PORTREVISION.
PR: 175862 (*)
Update from 1.3.11 to 1.3.12.
Update SPDY patch from version 60 to 61.
<ChangeLog>
*) Feature: variables support in the "proxy_bind", "fastcgi_bind",
"memcached_bind", "scgi_bind", and "uwsgi_bind" directives.
*) Feature: the $pipe, $request_length, $time_iso8601, and $time_local
variables can now be used not only in the "log_format" directive.
Thanks to Kiril Kalchev.
*) Feature: IPv6 support in the ngx_http_geoip_module.
Thanks to Gregor Kaliie|nik.
(Only the first 15 lines of the commit message are shown above )
Update from 1.3.8 to 1.3.11.
Update SPDY patch from version 53 to 54.
Chunked support has been implemented and enabled by default in nginx' base, so
remove support for third-party chunkin module.
There are two third-party features are temporary disabled:
o) ngx_http_upload_module;
o) syslog support.
<ChangeLog>
Changes with nginx 1.3.11 10 Jan 2013
*) Bugfix: a segmentation fault might occur if logging was used; the bug
(Only the first 15 lines of the commit message are shown above )
Update from 3.0.17 to 3.0.19:
o) www/rubygem-passenger;
o) third-party passenger module for www/nginx and www/nginx-devel.
<Changes>
Release 3.0.19
--------------
* Nginx security fix: do not display Nginx version when
server_tokens are off.
* Fixed compilation problems on some systems.
* Fixed some Union Station-related bugs.
Release 3.0.18
--------------
* Fixed compilation problems on Fedora 17.
* Fixed Union Station compatibility with Rails 3.2.
* Phusion Passenger Enterprise Standalone now supports rolling
restarts and deployment error resistance.
</Changes>
Update from 1.3.7 to 1.3.8.
Feature safe: yes
<ChangeLog>
*) Feature: the "optional_no_ca" parameter of the "ssl_verify_client"
directive.
Thanks to Mike Kazantsev and Eric O'Connor.
*) Feature: the $bytes_sent, $connection, and $connection_requests
variables can now be used not only in the "log_format" directive.
Thanks to Benjamin Grts+ssing.
*) Feature: the "auto" parameter of the "worker_processes" directive.
*) Bugfix: "cache file ... has md5 collision" alert.
*) Bugfix: in the ngx_http_gunzip_filter_module.
*) Bugfix: in the "ssl_stapling" directive.
</ChangeLog>
Update third-party modules:
o) drizzle - from 0.1.2 to 0.1.4;
o) lua - from 0.5.14 to 0.6.10;
o) redis2 - from 0.08rc4 to 0.09;
o) rtmp - from 0.2.3 to 0.6.1;
o) srcache - from 0.14 to 0.16.
Convert header to modern manner.
Feature safe: yes
Update from 1.3.6 to 1.3.7.
<ChangeLog>
*) Feature: OCSP stapling support.
Thanks to Comodo, DigiCert and GlobalSign for sponsoring this work.
*) Feature: the "ssl_trusted_certificate" directive.
*) Feature: resolver now randomly rotates addresses returned from cache.
Thanks to Anton Jouline.
*) Bugfix: OpenSSL 0.9.7 compatibility.
</ChangeLog>
Fix SIZE line for ldap third-party module.
