summaryrefslogtreecommitdiff
path: root/CHANGES
diff options
context:
space:
mode:
authornginx <nginx@nginx.org>2013-05-07 11:28:58 +0000
committerJon Kolb <jon@b0g.us>2013-05-07 11:28:58 +0000
commite9bd13a142dcc2333c60638409a3e6893b35cdb2 (patch)
tree54e35beef234acc8ada3f2353572d36d8036620a /CHANGES
parent740eba7e73bf85fd7e93e2d908f64f649d1819ab (diff)
downloadnginx-e9bd13a142dcc2333c60638409a3e6893b35cdb2.tar.gz
Changes with nginx 1.4.1 07 May 2013v1.4.1
*) Security: a stack-based buffer overflow might occur in a worker process while handling a specially crafted request, potentially resulting in arbitrary code execution (CVE-2013-2028); the bug had appeared in 1.3.9. Thanks to Greg MacManus, iSIGHT Partners Labs.
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES9
1 files changed, 9 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 56aaf478f..fd42b20ee 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,13 @@
+Changes with nginx 1.4.1 07 May 2013
+
+ *) Security: a stack-based buffer overflow might occur in a worker
+ process while handling a specially crafted request, potentially
+ resulting in arbitrary code execution (CVE-2013-2028); the bug had
+ appeared in 1.3.9.
+ Thanks to Greg MacManus, iSIGHT Partners Labs.
+
+
Changes with nginx 1.4.0 24 Apr 2013
*) Bugfix: nginx could not be built with the ngx_http_perl_module if the