Thema: Mini/Test/DHCP/Webserver und Tools diverses

[SiLæncer]

ApHeMo (Apache Health Monitoring) is a Health Monitoring analyzer for Apache HTTP Server. ApHeMo makes administrators able to improve security, reliability and to easily detect attacks from hackers (scans, potential backdoors).

Freemium

Whats new:>>

[Refactoring] Code signing certificate renewal (Kyle_Katarn)
[New Feature] Capacity to remove licence (Kyle_Katarn)
[Refactoring] Update ICS library to 8.65 and OpenSSL to 1.1.1i (Kyle_Katarn)
[Refactoring] Updated Dutch translation (Kyle_Katarn)
[Refactoring] Updated Spanish translation (Kyle_Katarn)

https://www.kcsoftwares.com/?aphemo

[SiLæncer]

Changelog

    Change: the default value of the "keepalive_requests" directive was
    changed to 1000.
    Feature: the "keepalive_time" directive.
    Feature: the $connection_time variable.
    Workaround: "gzip filter failed to use preallocated memory" alerts
    appeared in logs when using zlib-ng.

[close]

http://nginx.org/

[SiLæncer]

Release Notes

nginx-1.20.0 stable version has been released, incorporating new features and bug fixes from the 1.19.x mainline branch  — including OCSP validation of client SSL certificates, the ssl_reject_handshake and ssl_conf_command directives, simplified and improved handling of HTTP/2 connections with the lingering_close, keepalive_timeout, and keepalive_requests directives, the keepalive_time directive, stricter handling of upstream server responses, cookie flags handling, cache clearing based on the minimum amount of free space, PROXY protocol support from clients and to backend servers in the mail proxy, proxying SMTP authentication, the set directive in the stream module, and more.

[close]

http://nginx.org/

[SiLæncer]

Release Notes

    Security: 1-byte memory overwrite might occur during DNS server response processing if the "resolver" directive was used, allowing an attacker who is able to forge UDP packets from the DNS server to cause worker process crash or, potentially, arbitrary code execution (CVE-2021-23017.
    Feature: variables support in the "proxy_ssl_certificate", "proxy_ssl_certificate_key" "grpc_ssl_certificate", "grpc_ssl_certificate_key", "uwsgi_ssl_certificate", and "uwsgi_ssl_certificate_key" directives.
    Feature: the "max_errors" directive in the mail proxy module.
    Feature: the mail proxy module supports POP3 and IMAP pipelining.
    Feature: the "fastopen" parameter of the "listen" directive in the stream module. Thanks to Anbang Wen.
    Bugfix: special characters were not escaped during automatic redirect with appended trailing slash.
    Bugfix: connections with clients in the mail proxy module might be closed unexpectedly when using SMTP pipelining.

[close]

http://nginx.org/

[SiLæncer]

Changelog

    Change: now nginx always returns an error for the CONNECT method.
    Change: now nginx always returns an error if both "Content-Length" and "Transfer-Encoding" header lines are present in the request.
    Change: now nginx always returns an error if spaces or control characters are used in the request line.
    Change: now nginx always returns an error if spaces or control characters are used in a header name.
    Change: now nginx always returns an error if spaces or control characters are used in the "Host" request header line.
    Change: optimization of configuration testing when using many listening sockets.
    Bugfix: nginx did not escape """, "<", ">", "", "^", "`", "{", "|", and "}" characters when proxying with changed URI.
    Bugfix: SSL variables might be empty when used in logs; the bug had appeared in 1.19.5.
    Bugfix: keepalive connections with gRPC backends might not be closed after receiving a GOAWAY frame.
    Bugfix: reduced memory consumption for long-lived requests when proxying with more than 64 buffers.

[close]

http://nginx.org/

[SiLæncer]

Changelog

    Change: now nginx rejects HTTP/1.0 requests with the "Transfer-Encoding" header line.
    Change: export ciphers are no longer supported.
    Feature: OpenSSL 3.0 compatibility.
    Feature: the "Auth-SSL-Protocol" and "Auth-SSL-Cipher" header lines are now passed to the mail proxy authentication server. Thanks to Rob Mueller.
    Feature: request body filters API now permits buffering of the data being processed.
    Bugfix: backend SSL connections in the stream module might hang after an SSL handshake.
    Bugfix: the security level, which is available in OpenSSL 1.1.0 or newer, did not affect loading of the server certificates when set with "@SECLEVEL=N" in the "ssl_ciphers" directive.
    Bugfix: SSL connections with gRPC backends might hang if select, poll, or /dev/poll methods were used.
    Bugfix: when using HTTP/2 client request body was always written to disk if the "Content-Length" header line was not present in the request.

[close]

http://nginx.org/

[SiLæncer]

Changelog

    Change: optimization of client request body reading when using
    HTTP/2.
    *) Bugfix: in request body filters internal API when using HTTP/2 and
    Buffering of the data being processed.

[close]

http://nginx.org/

[SiLæncer]

Changelog

Important changes

    improve performance, reduce memory use, bugfixes

Highlights

    HTTP/2 smoother and lower memory use (in general)
    HTTP/2 tuning to better handle aggressive client initial requests
    reduce memory footprint; workaround poor glibc behavior; jemalloc is better
    mod_magnet lua performance improvements
    mod_dirlisting performance improvements and new caching option
    memory constraints for extreme edge cases in mod_dirlisting, mod_ssi, mod_webdav
    connect(), write(), read() time limits on backends (separate from client timeouts)
    lighttpd restarts if large discontinuity in time occurs (embedded systems)
    RFC7233 Range support for all non-streaming responses, not only static files

[close]

http://www.lighttpd.net/

[SiLæncer]

Whats new:>>

    [Refactoring] Update ICS library to 8.66 and OpenSSL to 1.1.1k (Kyle_Katarn)
    [Refactoring] Updated Turkish translation (Kyle_Katarn)
    [Refactoring] Updated Slovenian translation (Kyle_Katarn)
    [Bug] Windows 11 is identified as a Windows 10 (Kyle_Katarn)

https://www.kcsoftwares.com/?aphemo