# Nginx-1.5.7

**URL:** <https://www.ruby-forum.com/t/nginx-1-5-7/237568>\
**Category:** NGINX\
**Created:** [November 19, 2013, 4:01pm UTC](https://www.ruby-forum.com/t/nginx-1-5-7/237568 "2013-11-19T16:01:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Detlef\_R](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/58f4c7/32.png) [@Detlef\_R](https://www.ruby-forum.com/u/Detlef_R)\
**Post date:** [November 19, 2013, 4:01pm UTC](https://www.ruby-forum.com/t/nginx-1-5-7/237568/1 "2013-11-19T16:01:18Z")

</div>

Changes with nginx 1.5.7 19 Nov  
2013

```
*) Security: a character following an unescaped space in a request 

```

line  
was handled incorrectly (CVE-2013-4547); the bug had appeared in  
0.8.41.  
Thanks to Ivan Fratric of the Google Security Team.

```
*) Change: a logging level of auth_basic errors about no 

```

user/password  
provided has been lowered from “error” to “info”.

```
*) Feature: the "proxy_cache_revalidate", 

```

“fastcgi\_cache\_revalidate”,  
“scgi\_cache\_revalidate”, and “uwsgi\_cache\_revalidate” directives.

```
*) Feature: the "ssl_session_ticket_key" directive.
   Thanks to Piotr S..

*) Bugfix: the directive "add_header Cache-Control ''" added a
   "Cache-Control" response header line with an empty value.

*) Bugfix: the "satisfy any" directive might return 403 error 

```

instead of  
401 if auth\_request and auth\_basic directives were used.  
Thanks to Jan Marc Hoffmann.

```
*) Bugfix: the "accept_filter" and "deferred" parameters of the 

```

“listen”  
directive were ignored for listen sockets created during binary  
upgrade.  
Thanks to Piotr S…

```
*) Bugfix: some data received from a backend with unbufferred proxy
   might not be sent to a client immediately if "gzip" or "gunzip"
   directives were used.
   Thanks to Yichun Z..

*) Bugfix: in error handling in ngx_http_gunzip_filter_module.

*) Bugfix: responses might hang if the ngx_http_spdy_module was used
   with the "auth_request" directive.

*) Bugfix: memory leak in nginx/Windows.

```

–  
Maxim D.  
[http://nginx.org/en/donation.html](http://nginx.org/en/donation.html)

---

<div class="post-metadata">

**Author:** ![Maxim\_D](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/da6949/32.png) [@Maxim\_D](https://www.ruby-forum.com/u/Maxim_D)\
**Post date:** [November 20, 2013, 5:39pm UTC](https://www.ruby-forum.com/t/nginx-1-5-7/237568/2 "2013-11-20T17:39:58Z")

</div>

Hello Nginx users,

Now available: Nginx 1.5.7 for Windows [Nginx 1.5.7 for Windows – Kevin Worthington](http://goo.gl/sZYAx9) (32-bit  
and 64-bit versions)

These versions are to support legacy users who are already using  
Cygwin based builds of Nginx. Officially supported native Windows  
binaries are at [nginx.org](http://nginx.org).

Announcements are also available via my Twitter stream  
([http://twitter.com/kworthington](http://twitter.com/kworthington)), if you prefer to receive updates  
that way.

## Thank you, Kevin

Kevin W.  
kworthington _@_ (gmail] [dot} {com)

> **[Kevin Worthington](https://kevinworthington.com/)**
>
> Nginx for Windows, WordPress, iPhone, Gmail, Windows, Linux, Lighttpd for Windows, and Tech

[http://twitter.com/kworthington](http://twitter.com/kworthington)

On 11/19/13, Maxim D. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> of  
> might not be sent to a client immediately if “gzip” or “gunzip”
> 
> –  
> Maxim D.  
> [nginx: donation](http://nginx.org/en/donation.html)
> 
> * * *
> 
> nginx mailing list  
> removed\_email\_address@domain.invalid  
> [nginx Info Page](http://mailman.nginx.org/mailman/listinfo/nginx)

## – Best regards, Kevin

Kevin W.  
removed\_email\_address@domain.invalid

> **[Kevin Worthington](https://kevinworthington.com/)**
>
> Nginx for Windows, WordPress, iPhone, Gmail, Windows, Linux, Lighttpd for Windows, and Tech

(516) 647-1992  
[http://twitter.com/kworthington](http://twitter.com/kworthington)
