add Unit 1.34.2 details (#604)

* add Unit 1.34.2 details

* make link to releases more prominent for Unit

Author: JTorreG

content/unit/about.md

@@ -12,8 +12,11 @@ running application code (including WebAssembly), serving static assets,
 handling TLS and request routing.
 
 Unit was created by [nginx](https://nginx.org/en/) team members from scratch to
-be highly efficient and fully configurable at runtime. You can read the details
-about the latest release in the [news]({{< relref "/unit/news/">}}) section.
+be highly efficient and fully configurable at runtime.
+
+{{< tip >}}You can read the details
+about the latest release in the [Releases and announcements]({{< relref "/unit/news/">}}) section.
+{{< /tip >}}
 
 - See a quickstart [guide](https://github.com/nginx/unit/) on our GitHub page.
 - Browse the [Changelog]({{< relref "/unit/changes/">}}) or see the release notes in the [Releases and announcements]({{< relref "/unit/news/">}}) archive.

content/unit/changes.md

@@ -5,6 +5,15 @@ toc: true
 ---
 
 ```text
+Changes with Unit 1.34.2                                         26 Feb 2025
+
+    *) Security: fix missing websocket payload length validation in the Java
+       language module which could lead to Java language module processes
+       consuming excess CPU. (CVE-2025-1695).
+
+    *) Bugfix: fix incorrect websocket payload length calculation in the
+       Java language module.
+
 Changes with Unit 1.34.1                                         10 Jan 2025
 
     *) Bugfix: fix instability issues due to OpenTelemetry (OTEL) support.

content/unit/news/2025/unit-1.34.1-released.md

@@ -1,6 +1,6 @@
 ---
 title: Unit 1.34.1 Released
-weight: 100
+weight: 1000
 ---
 
 We are pleased to announce the release of NGINX Unit 1.34.1. This is a

content/unit/news/2025/unit-1.34.2-released.md

@@ -0,0 +1,21 @@
+---
+title: Unit 1.34.2 Released
+weight: 900
+---
+
+We are pleased to announce the release of NGINX Unit 1.34.2. This is a maintenance release that fixes a couple of issues in the Java WebSocket code within the Java language module.
+
+- Security: When the NGINX Unit Java Language module is in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization (CVE-2025-1695).
+
+## Full Changelog
+
+```none
+Changes with Unit 1.34.2                                         26 Feb 2025
+
+    *) Security: fix missing websocket payload length validation in the Java
+       language module which could lead to Java language module processes
+       consuming excess CPU. (CVE-2025-1695).
+
+    *) Bugfix: fix incorrect websocket payload length calculation in the
+       Java language module.
+```