[Pkg-nginx-maintainers] Bug#844473: Update nginx module nchan to 1.0.6

nobody junk at slact.net
Tue Nov 29 00:36:00 UTC 2016


The latest version of Nchan is now 1.0.8. I've updated the debian build,
you can pull it from https://github.com/slact/nginx-deb

Changes since 1.0.6:

1.0.8 (Nov. 28 2016)
 fix: possible crash under severely heavy load, introduced in 1.0.7 with
stack-overflow fix
1.0.7 (Nov. 27 2016)
 fix: memory leak after websocket publisher uncleanly aborts connection
 fix: misbehaving websocket publisher with nchan_publisher_upstream_request
 fix: potential stack overflow with very large message buffers
 fix: invalid memory access with empty nchan_publisher_upstream_request
for websocket publisher
 fix: incorrect handling of chunked response from
nchan_publisher_upstream_request
 fix: publishing through websocket too fast may result in buffered
messages that never arrive
 fix: DELETE to multiplexed channel should delete all listed channels
 fix: abort if publishing to multiple channels while using redis


junk at slact.net:
> Package: nginx
> Version: 1.10.2-2
> 
> I'm the author of Nchan and I've released a new version with some
> important bugfixes, security fixes, and new features. It would be nice
> if the Nginx package could be updated to the latest version, 1.0.6
> 
> https://nchan.slact.net/changelog
> 
> Changes since 1.0.2 (current version in the Debian package):
> 
> 1.0.6 (Nov. 15 2016)
>  fix: large messages were sometimes incorrectly cleaned up, leaving
> behind temp files
>  fix: file descriptor leak when listening on a unix socket and suddenly
> aborting client connections
>  fix: invalid memory access after reloading twice with redis enabled
>  fix: crash after shutting down nginx when 'master_process' set to 'off'
>  change: nchan_max_channel_subscribers now always refers to subscribers
> on this instance of Nchan, even when using Redis.
>  feature: subscribe/unsubscribe callbacks with nchan_subscribe_request
> and nchan_unsubscribe_request
> 1.0.4 (Oct. 28 2016)
>  security: fix crash when receiving large messages over websocket with
> ws+nchan subprotocol
> 1.0.3 (Sept. 3 2016)
>  feature: nchan_message_timeout and nchan_message_buffer_length can now
> use nginx variables for dynamic values
>  fix: unsolicited websocket PONGs disconnected the subscriber in
> violation of RFC6455
>  fix: possible script error when getting channel from Redis
>  fix: possible incorrect message IDs when using Redis (thanks @supertong)
>  security: possible invalid memory access on publisher GET, POST, or
> DELETE when using Redis and the publisher connection is terminated
> before receiving a response
>  fix: correct publisher response code when nchan_authorize_request is
> unavailable (502 instead of 500)
>  security: crash if publisher POSTs request with no Content-Length
> header when using nchan_authorize_request
> 
> https://nchan.slact.net/
> 
> Thanks,
>    Leo P.
> 



More information about the Pkg-nginx-maintainers mailing list