From: Igor Sysoev <igor@sysoev.ru>
Date: Tue, 17 Jul 2007 10:01:17 +0000 (+0000)
Subject: nginx-0.5.28-RELEASE
X-Git-Tag: release-0.5.28
X-Git-Url: http://www.kaiwu.me/postgresql/commit/?a=commitdiff_plain;h=24d4460336dd7418ec78a2b3fca43755808d4f6c;p=nginx.git

nginx-0.5.28-RELEASE
---

diff --git a/docs/xml/nginx/changes.xml b/docs/xml/nginx/changes.xml
index 0a0363f0c..667e5f04f 100644
--- a/docs/xml/nginx/changes.xml
+++ b/docs/xml/nginx/changes.xml
@@ -9,6 +9,55 @@
 <title lang="en">nginx changelog</title>
 
 
+<changes ver="0.5.28" date="17.06.2007">
+
+<change type="security">
+<para lang="ru">
+ÐÒÉ ÉÓÐÏÌØÚÏ×ÁÎÉÉ ÄÉÒÅËÔÉ×Ù msie_refresh ÂÙÌ ×ÏÚÍÏÖÅÎ XSS.
+</para>
+<para lang="en">
+the "msie_refresh" directive allowed XSS.
+</para>
+</change>
+
+<change type="bugfix">
+<para lang="ru">
+ÐÒÉ ÉÓÐÏÌØÚÏ×ÁÎÉÉ ÄÉÒÅËÔÉ×Ù auth_http_header
+× ÒÁÂÏÞÅÍ ÐÒÏÃÅÓÓÅ ÍÏÇ ÐÒÏÉÚÏÊÔÉ segmentation fault.<br/>
+óÐÁÓÉÂÏ íÁËÓÉÍÕ äÕÎÉÎÕ.
+</para>
+<para lang="en">
+a segmentation fault might occur in worker process
+if the "auth_http_header" directive was used.<br/>
+Thanks to Maxim Dounin.
+</para>
+</change>
+
+<change type="bugfix">
+<para lang="ru">
+ÅÓÌÉ ÉÓÐÏÌØÚÏ×ÁÌÓÑ ÍÅÔÏÄ ÁÕÔÅÎÔÉÆÉËÁÃÉÉ CRAM-MD5, ÎÏ ÏÎ ÎÅ ÂÙÌ ÒÁÚÒÅÛ£Î,
+ÔÏ × ÒÁÂÏÞÅÍ ÐÒÏÃÅÓÓÅ ÐÒÏÉÓÈÏÄÉÌ segmentation fault.
+</para>
+<para lang="en">
+a segmentation fault occurred in worker process
+if the CRAM-MD5 authentication method was used, but it was not enabled.
+</para>
+</change>
+
+<change type="bugfix">
+<para lang="ru">
+× ÒÁÂÏÞÅÍ ÐÒÏÃÅÓÓÅ ÍÏÇ ÐÒÏÉÚÏÊÔÉ segmentation fault,
+ÅÓÌÉ ÉÓÐÏÌØÚÏ×ÁÌÓÑ ÍÅÔÏÄ eventport.
+</para>
+<para lang="en">
+a segmentation fault might occur in worker process
+if the eventport method was used.
+</para>
+</change>
+
+</changes>
+
+
 <changes ver="0.5.27" date="09.07.2007">
 
 <change type="bugfix">
@@ -694,7 +743,7 @@ nginx 
 ÏÛÉÂËÁ ÐÏÑ×ÉÌÁÓØ × 0.5.8.
 </para>
 <para lang="en">
-nginx could not be built on platforms different from i386, amd64, sparc É ppc;
+nginx could not be built on platforms different from i386, amd64, sparc and ppc;
 bug appeared in 0.5.8.
 </para>
 </change>