Ukukhishwa kokuqala kwegatsha elisha eliyinhloko le-nginx 1.23.0 kwethulwe, lapho ukuthuthukiswa kwezici ezintsha kuzoqhubeka. Igatsha elizinzile elinakekelwa ngokufana elithi 1.22.x liqukethe kuphela izinguquko ezihlobene nokuqedwa kweziphazamisi ezinkulu nokuba sengozini. Ngonyaka ozayo, ngokusekelwe egatsheni eliyinhloko 1.23.x, kuzokwakhiwa igatsha elizinzile 1.24.
Izinguquko eziyinhloko:
- I-API yangaphakathi isisetshenzwe kabusha, imigqa kanhlokweni manje ithunyelwa ngendlela yohlu oluxhunyiwe.
- Kunikwe amandla ukuhlanganisa imigqa kanhlokweni namagama afanayo lapho idluliselwa ku-FastCGI, SCGI kanye ne-uwsgi backends, ngendlela engu-$r->header_in() yemojula ye-ngx_http_perl_module nasezinguqulweni ezithi “$http_...”, “$sent_http_... ”, “$sent_trailer_...”, “ $upstream_http_..." kanye ne-"$upstream_trailer_...".
- Ku-SSL "idatha yohlelo lokusebenza ngemva kwamaphutha esaziso esiseduze", ileveli yelogi yehlisiwe ukusuka ku-"crit" ukuya "kulwazi".
- Kulungiswe inkinga ngoxhumo olulenga ku-nginx eyakhelwe kumasistimu e-Linux nge-kernel 2.6.17 nakamuva, kodwa esetshenziswa kumasistimu angenawo usekelo lwe-EPOLLRDHUP (isibonelo, uma usebenzisa i-epoll emulation).
- Kulungiswe inkinga ngokugcinwa kwesikhashana kwempendulo uma unhlokweni othi "Okuphelelwa yisikhathi" ungavumeli ukugcinwa kwesikhashana, kodwa okuthi "Cache-Control" kukuvumele.
- Izinkinga ezixazululiwe ezenzeke uma i-backend ikhiphe izihloko ezimbalwa ezithi "Vary" kanye nethi "WWW-Authenticate" empendulweni.
Source: opennet.ru