Ukukhutshwa kwe-nginx 1.21.2 kunye ne-njs 0.6.2

Isebe eliphambili le-nginx 1.21.2 likhutshiwe, ngaphakathi apho ukuphuhliswa kweempawu ezintsha kuyaqhubeka (kwisebe elizinzile elixhaswayo 1.20, kuphela utshintsho olunxulumene nokupheliswa kweempazamo ezinzulu kunye nobuthathaka obuyenziwe).

Utshintsho oluphambili:

  • Izicelo ze-HTTP/1.0 ezibandakanya i-header ye-HTTP ethi "Transfer-Encoding" ivaliwe (ibonakale kwi-HTTP/1.1 protocol version).
  • Inkxaso yokuthumela ngaphandle i-cipher suite iye yanqunyanyiswa.
  • Ukuhambelana nethala leencwadi le-OpenSSL 3.0 kuqinisekiswa.
  • Kuphunyezwe ugqithiselo lwe-"Auth-SSL-Protocol" kunye ne-"Auth-SSL-Cipher" headers kwi-mail proxy server.
  • I-API yokucoca umzimba wesicelo ivumela ukugcinwa kwedatha ecutshungulweyo.
  • Xa kulayishwa izatifikethi zeseva, ukusetyenziswa kwamanqanaba okhuseleko axhaswayo ukusuka kwi-OpenSSL 1.1.0 kwaye icaciswe nge-"@SECLEVEL=N" ipharamitha kwi-ssl_ciphers imiyalelo ilungisiwe.
  • Ukuxhoma okulungisiweyo okwenzekileyo xa kusenziwa uxhulumaniso lwe-SSL kwii-backends kumjelo kunye neemodyuli ze-gRPC.
  • Ingxaki ngokubhala ibhodi yesicelo kwidiski xa usebenzisa i-HTTP/2, ngokungabikho kwesihloko esithi "Ubude bomxholo" kwisicelo, isonjululwe.

Ngexesha elifanayo, i-njs 0.6.2 yakhululwa, itoliki yeJavaScript yeseva yewebhu ye-nginx. Itoliki ye-njs yenza imigangatho ye-ECMAScript kwaye ikuvumela ukuba wandise ukukwazi kwe-nginx ukucubungula izicelo usebenzisa izikripthi kuqwalaselo. Izikripthi zinokusetyenziswa kwifayile yoqwalaselo ukuchaza ingqiqo ephambili yokucubungula izicelo, ukuvelisa uqwalaselo, ukuvelisa ngokuguquguqukayo ukuphendula, ukuguqula isicelo / impendulo, okanye ngokukhawuleza ukudala i-stubs ukusombulula iingxaki kwizicelo zewebhu. Kwinguqulelo entsha, i-Promise.all (), Promise.allSettled (), Promise.any () kunye ne-Promise.race () iindlela zongezwe ekuphunyezweni kweSithembiso. Ukusetyenziswa kwenkxaso ye-AggregateError into.

umthombo: opennet.ru

Yongeza izimvo