Fijxu
/
nginx-quic
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nginx-1.4.1-RELEASE

This commit is contained in:
Maxim Dounin 2013-05-06 14:20:27 +04:00
parent 6a583e5792
commit ad0825c491
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
docs/xml/nginx/changes.xml
View File

@ -5,6 +5,28 @@
<change_log title="nginx">
<changes ver="1.4.1" date="07.05.2013">
<change type="security">
<para lang="ru">
при обработке специально созданного запроса
мог перезаписываться стек рабочего процесса,
что могло приводить к выполнению произвольного кода (CVE-2013-2028);
ошибка появилась в 1.3.9.<br/>
Спасибо Greg MacManus, iSIGHT Partners Labs.
</para>
<para lang="en">
a stack-based buffer overflow might occur in a worker process
while handling a specially crafted request,
potentially resulting in arbitrary code execution (CVE-2013-2028);
the bug had appeared in 1.3.9.<br/>
Thanks to Greg MacManus, iSIGHT Partners Labs.
</para>
</change>
</changes>
<changes ver="1.4.0" date="24.04.2013">
<change type="bugfix">