Nginx: upgrade to 1.16.1 for HTTP/2(CVE-2019-9511, CVE-2019-9513, CVE-2019-9516)

2019-10-29 19:25:56 +08:00 · 2019-10-29 19:25:56 +08:00 · 3da8d17db6
parent 73e135b80c
commit 3da8d17db6
404 changed files with 52 additions and 7 deletions
--- a/app/nginx-1.16.1/CHANGES
+++ b/app/nginx-1.16.1/CHANGES
@ -1,4 +1,11 @@

+Changes with nginx 1.16.1                                        13 Aug 2019
+
+    *) Security: when using HTTP/2 a client might cause excessive memory
+       consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
+       CVE-2019-9516).
+
+
 Changes with nginx 1.16.0                                        23 Apr 2019

    *) 1.16.x stable branch.
--- a/app/nginx-1.16.1/CHANGES.ru
+++ b/app/nginx-1.16.1/CHANGES.ru
@ -1,4 +1,11 @@

+Изменения в nginx 1.16.1                                          13.08.2019
+
+    *) Безопасность: при использовании HTTP/2 клиент мог вызвать чрезмерное
+       потребление памяти и ресурсов процессора (CVE-2019-9511,
+       CVE-2019-9513, CVE-2019-9516).
+
+
 Изменения в nginx 1.16.0                                          23.04.2019

    *) Стабильная ветка 1.16.x.
--- a/app/nginx-1.16.1/LICENSE
+++ b/app/nginx-1.16.1/LICENSE
--- a/app/nginx-1.16.1/README
+++ b/app/nginx-1.16.1/README
--- a/app/nginx-1.16.1/auto/cc/acc
+++ b/app/nginx-1.16.1/auto/cc/acc
--- a/app/nginx-1.16.1/auto/cc/bcc
+++ b/app/nginx-1.16.1/auto/cc/bcc
--- a/app/nginx-1.16.1/auto/cc/ccc
+++ b/app/nginx-1.16.1/auto/cc/ccc
--- a/app/nginx-1.16.1/auto/cc/clang
+++ b/app/nginx-1.16.1/auto/cc/clang
--- a/app/nginx-1.16.1/auto/cc/conf
+++ b/app/nginx-1.16.1/auto/cc/conf
--- a/app/nginx-1.16.1/auto/cc/gcc
+++ b/app/nginx-1.16.1/auto/cc/gcc
--- a/app/nginx-1.16.1/auto/cc/icc
+++ b/app/nginx-1.16.1/auto/cc/icc
--- a/app/nginx-1.16.1/auto/cc/msvc
+++ b/app/nginx-1.16.1/auto/cc/msvc
--- a/app/nginx-1.16.1/auto/cc/name
+++ b/app/nginx-1.16.1/auto/cc/name
--- a/app/nginx-1.16.1/auto/cc/owc
+++ b/app/nginx-1.16.1/auto/cc/owc
--- a/app/nginx-1.16.1/auto/cc/sunc
+++ b/app/nginx-1.16.1/auto/cc/sunc
--- a/app/nginx-1.16.1/auto/define
+++ b/app/nginx-1.16.1/auto/define
--- a/app/nginx-1.16.1/auto/endianness
+++ b/app/nginx-1.16.1/auto/endianness
--- a/app/nginx-1.16.1/auto/feature
+++ b/app/nginx-1.16.1/auto/feature
--- a/app/nginx-1.16.1/auto/have
+++ b/app/nginx-1.16.1/auto/have
--- a/app/nginx-1.16.1/auto/have_headers
+++ b/app/nginx-1.16.1/auto/have_headers
--- a/app/nginx-1.16.1/auto/headers
+++ b/app/nginx-1.16.1/auto/headers
--- a/app/nginx-1.16.1/auto/include
+++ b/app/nginx-1.16.1/auto/include
--- a/app/nginx-1.16.1/auto/init
+++ b/app/nginx-1.16.1/auto/init
--- a/app/nginx-1.16.1/auto/install
+++ b/app/nginx-1.16.1/auto/install
--- a/app/nginx-1.16.1/auto/lib/conf
+++ b/app/nginx-1.16.1/auto/lib/conf
--- a/app/nginx-1.16.1/auto/lib/geoip/conf
+++ b/app/nginx-1.16.1/auto/lib/geoip/conf
--- a/app/nginx-1.16.1/auto/lib/google-perftools/conf
+++ b/app/nginx-1.16.1/auto/lib/google-perftools/conf
--- a/app/nginx-1.16.1/auto/lib/libatomic/conf
+++ b/app/nginx-1.16.1/auto/lib/libatomic/conf
--- a/app/nginx-1.16.1/auto/lib/libatomic/make
+++ b/app/nginx-1.16.1/auto/lib/libatomic/make
--- a/app/nginx-1.16.1/auto/lib/libgd/conf
+++ b/app/nginx-1.16.1/auto/lib/libgd/conf
--- a/app/nginx-1.16.1/auto/lib/libxslt/conf
+++ b/app/nginx-1.16.1/auto/lib/libxslt/conf
--- a/app/nginx-1.16.1/auto/lib/make
+++ b/app/nginx-1.16.1/auto/lib/make
--- a/app/nginx-1.16.1/auto/lib/openssl/conf
+++ b/app/nginx-1.16.1/auto/lib/openssl/conf
--- a/app/nginx-1.16.1/auto/lib/openssl/make
+++ b/app/nginx-1.16.1/auto/lib/openssl/make
--- a/app/nginx-1.16.1/auto/lib/openssl/makefile.bcc
+++ b/app/nginx-1.16.1/auto/lib/openssl/makefile.bcc
--- a/app/nginx-1.16.1/auto/lib/openssl/makefile.msvc
+++ b/app/nginx-1.16.1/auto/lib/openssl/makefile.msvc
--- a/app/nginx-1.16.1/auto/lib/pcre/conf
+++ b/app/nginx-1.16.1/auto/lib/pcre/conf
--- a/app/nginx-1.16.1/auto/lib/pcre/make
+++ b/app/nginx-1.16.1/auto/lib/pcre/make
--- a/app/nginx-1.16.1/auto/lib/pcre/makefile.bcc
+++ b/app/nginx-1.16.1/auto/lib/pcre/makefile.bcc
--- a/app/nginx-1.16.1/auto/lib/pcre/makefile.msvc
+++ b/app/nginx-1.16.1/auto/lib/pcre/makefile.msvc
--- a/app/nginx-1.16.1/auto/lib/pcre/makefile.owc
+++ b/app/nginx-1.16.1/auto/lib/pcre/makefile.owc
--- a/app/nginx-1.16.1/auto/lib/perl/conf
+++ b/app/nginx-1.16.1/auto/lib/perl/conf
--- a/app/nginx-1.16.1/auto/lib/perl/make
+++ b/app/nginx-1.16.1/auto/lib/perl/make
--- a/app/nginx-1.16.1/auto/lib/zlib/conf
+++ b/app/nginx-1.16.1/auto/lib/zlib/conf
--- a/app/nginx-1.16.1/auto/lib/zlib/make
+++ b/app/nginx-1.16.1/auto/lib/zlib/make
--- a/app/nginx-1.16.1/auto/lib/zlib/makefile.bcc
+++ b/app/nginx-1.16.1/auto/lib/zlib/makefile.bcc
--- a/app/nginx-1.16.1/auto/lib/zlib/makefile.msvc
+++ b/app/nginx-1.16.1/auto/lib/zlib/makefile.msvc
--- a/app/nginx-1.16.1/auto/lib/zlib/makefile.owc
+++ b/app/nginx-1.16.1/auto/lib/zlib/makefile.owc
--- a/app/nginx-1.16.1/auto/make
+++ b/app/nginx-1.16.1/auto/make
--- a/app/nginx-1.16.1/auto/module
+++ b/app/nginx-1.16.1/auto/module
--- a/app/nginx-1.16.1/auto/modules
+++ b/app/nginx-1.16.1/auto/modules
--- a/app/nginx-1.16.1/auto/nohave
+++ b/app/nginx-1.16.1/auto/nohave
--- a/app/nginx-1.16.1/auto/options
+++ b/app/nginx-1.16.1/auto/options
--- a/app/nginx-1.16.1/auto/os/conf
+++ b/app/nginx-1.16.1/auto/os/conf
--- a/app/nginx-1.16.1/auto/os/darwin
+++ b/app/nginx-1.16.1/auto/os/darwin
--- a/app/nginx-1.16.1/auto/os/freebsd
+++ b/app/nginx-1.16.1/auto/os/freebsd
--- a/app/nginx-1.16.1/auto/os/linux
+++ b/app/nginx-1.16.1/auto/os/linux
--- a/app/nginx-1.16.1/auto/os/solaris
+++ b/app/nginx-1.16.1/auto/os/solaris
--- a/app/nginx-1.16.1/auto/os/win32
+++ b/app/nginx-1.16.1/auto/os/win32
--- a/app/nginx-1.16.1/auto/sources
+++ b/app/nginx-1.16.1/auto/sources
--- a/app/nginx-1.16.1/auto/stubs
+++ b/app/nginx-1.16.1/auto/stubs
--- a/app/nginx-1.16.1/auto/summary
+++ b/app/nginx-1.16.1/auto/summary
--- a/app/nginx-1.16.1/auto/threads
+++ b/app/nginx-1.16.1/auto/threads
--- a/app/nginx-1.16.1/auto/types/sizeof
+++ b/app/nginx-1.16.1/auto/types/sizeof
--- a/app/nginx-1.16.1/auto/types/typedef
+++ b/app/nginx-1.16.1/auto/types/typedef
--- a/app/nginx-1.16.1/auto/types/uintptr_t
+++ b/app/nginx-1.16.1/auto/types/uintptr_t
--- a/app/nginx-1.16.1/auto/types/value
+++ b/app/nginx-1.16.1/auto/types/value
--- a/app/nginx-1.16.1/auto/unix
+++ b/app/nginx-1.16.1/auto/unix
--- a/app/nginx-1.16.1/conf/f-stack.conf
+++ b/app/nginx-1.16.1/conf/f-stack.conf
--- a/app/nginx-1.16.1/conf/fastcgi.conf
+++ b/app/nginx-1.16.1/conf/fastcgi.conf
--- a/app/nginx-1.16.1/conf/fastcgi_params
+++ b/app/nginx-1.16.1/conf/fastcgi_params
--- a/app/nginx-1.16.1/conf/koi-utf
+++ b/app/nginx-1.16.1/conf/koi-utf
--- a/app/nginx-1.16.1/conf/koi-win
+++ b/app/nginx-1.16.1/conf/koi-win
--- a/app/nginx-1.16.1/conf/mime.types
+++ b/app/nginx-1.16.1/conf/mime.types
--- a/app/nginx-1.16.1/conf/nginx.conf
+++ b/app/nginx-1.16.1/conf/nginx.conf
--- a/app/nginx-1.16.1/conf/scgi_params
+++ b/app/nginx-1.16.1/conf/scgi_params
--- a/app/nginx-1.16.1/conf/uwsgi_params
+++ b/app/nginx-1.16.1/conf/uwsgi_params
--- a/app/nginx-1.16.1/conf/win-utf
+++ b/app/nginx-1.16.1/conf/win-utf
--- a/app/nginx-1.16.1/configure
+++ b/app/nginx-1.16.1/configure
--- a/app/nginx-1.16.1/contrib/README
+++ b/app/nginx-1.16.1/contrib/README
--- a/app/nginx-1.16.1/contrib/geo2nginx.pl
+++ b/app/nginx-1.16.1/contrib/geo2nginx.pl
--- a/app/nginx-1.16.1/contrib/unicode2nginx/koi-utf
+++ b/app/nginx-1.16.1/contrib/unicode2nginx/koi-utf
--- a/app/nginx-1.16.1/contrib/unicode2nginx/unicode-to-nginx.pl
+++ b/app/nginx-1.16.1/contrib/unicode2nginx/unicode-to-nginx.pl
--- a/app/nginx-1.16.1/contrib/unicode2nginx/win-utf
+++ b/app/nginx-1.16.1/contrib/unicode2nginx/win-utf
--- a/app/nginx-1.16.1/contrib/vim/ftdetect/nginx.vim
+++ b/app/nginx-1.16.1/contrib/vim/ftdetect/nginx.vim
--- a/app/nginx-1.16.1/contrib/vim/ftplugin/nginx.vim
+++ b/app/nginx-1.16.1/contrib/vim/ftplugin/nginx.vim
--- a/app/nginx-1.16.1/contrib/vim/indent/nginx.vim
+++ b/app/nginx-1.16.1/contrib/vim/indent/nginx.vim
--- a/app/nginx-1.16.1/contrib/vim/syntax/nginx.vim
+++ b/app/nginx-1.16.1/contrib/vim/syntax/nginx.vim
--- a/app/nginx-1.16.1/html/50x.html
+++ b/app/nginx-1.16.1/html/50x.html
--- a/app/nginx-1.16.1/html/index.html
+++ b/app/nginx-1.16.1/html/index.html
--- a/app/nginx-1.16.1/man/nginx.8
+++ b/app/nginx-1.16.1/man/nginx.8
--- a/app/nginx-1.16.1/src/core/nginx.c
+++ b/app/nginx-1.16.1/src/core/nginx.c
--- a/app/nginx-1.16.1/src/core/nginx.h
+++ b/app/nginx-1.16.1/src/core/nginx.h
@ -9,8 +9,8 @@
 #define _NGINX_H_INCLUDED_


-#define nginx_version      1016000
-#define NGINX_VERSION      "1.16.0"
+#define nginx_version      1016001
+#define NGINX_VERSION      "1.16.1"
 #define NGINX_VER          "nginx/" NGINX_VERSION

 #ifdef NGX_BUILD
--- a/app/nginx-1.16.1/src/core/ngx_array.c
+++ b/app/nginx-1.16.1/src/core/ngx_array.c
--- a/app/nginx-1.16.1/src/core/ngx_array.h
+++ b/app/nginx-1.16.1/src/core/ngx_array.h
--- a/app/nginx-1.16.1/src/core/ngx_buf.c
+++ b/app/nginx-1.16.1/src/core/ngx_buf.c
--- a/app/nginx-1.16.1/src/core/ngx_buf.h
+++ b/app/nginx-1.16.1/src/core/ngx_buf.h
--- a/app/nginx-1.16.1/src/core/ngx_conf_file.c
+++ b/app/nginx-1.16.1/src/core/ngx_conf_file.c
--- a/app/nginx-1.16.1/src/core/ngx_conf_file.h
+++ b/app/nginx-1.16.1/src/core/ngx_conf_file.h
--- a/app/nginx-1.16.1/src/core/ngx_config.h
+++ b/app/nginx-1.16.1/src/core/ngx_config.h
--- a/Show More
+++ b/Show More