Ukukhishwa kokuqala kwegatsha elisha eliyinhloko le-nginx 1.23.0 kwethulwe, lapho ukuthuthukiswa kwezici ezintsha kuzoqhubeka. Igatsha elizinzile elinakekelwa ngokufana elithi 1.22.x liqukethe kuphela izinguquko ezihlobene nokuqedwa kweziphazamisi ezinkulu nokuba sengozini. Ngonyaka ozayo, ngokusekelwe egatsheni eliyinhloko 1.23.x, kuzokwakhiwa igatsha elizinzile 1.24.
Izinguquko eziyinhloko:
- I-API yangaphakathi isisetshenzwe kabusha, imigqa kanhlokweni manje ithunyelwa ngendlela yohlu oluxhunyiwe.
- Kunikwe amandla ukuhlanganisa imigqa kanhlokweni namagama afanayo lapho idluliselwa ku-FastCGI, SCGI kanye ne-uwsgi backends, ngendlela engu-$r->header_in() yemojula ye-ngx_http_perl_module nasezinguqulweni ezithi “$http_...”, “$sent_http_... ”, “$sent_trailer_...”, “ $upstream_http_..." kanye ne-"$upstream_trailer_...".
- Ngamaphutha I-SSL "idatha yohlelo lokusebenza ngemva kokuvala isaziso" izinga lelogi lehlisiwe kusuka ku-"crit" kuya ku-"info.
- Kulungiswe inkinga ngokuxhumeka okulenga ku-nginx okuhlanganiswe ku- Linux-izinhlelo ezine-kernel 2.6.17 nezintsha, kodwa ezisetshenziswa ezinhlelweni ezingenasekelo lwe-EPOLLRDHUP (isibonelo, uma kusetshenziswa ukulingisa kwe-epoll).
- Kulungiswe inkinga ngokugcinwa kwesikhashana kwempendulo uma unhlokweni othi "Okuphelelwa yisikhathi" ungavumeli ukugcinwa kwesikhashana, kodwa okuthi "Cache-Control" kukuvumele.
- Izinkinga ezixazululiwe ezenzeke uma i-backend ikhiphe izihloko ezimbalwa ezithi "Vary" kanye nethi "WWW-Authenticate" empendulweni.
Source: opennet.ru
