From 47c4fba86c48d7b8556c7f4d6d3773a25ab162fe Mon Sep 17 00:00:00 2001 From: nginx Date: Tue, 18 Mar 2014 16:43:46 +0000 Subject: Changes with nginx 1.4.7 18 Mar 2014 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit *) Security: a heap memory buffer overflow might occur in a worker process while handling a specially crafted request by ngx_http_spdy_module, potentially resulting in arbitrary code execution (CVE-2014-0133). Thanks to Lucas Molas, researcher at Programa STIC, Fundación Dr. Manuel Sadosky, Buenos Aires, Argentina. *) Bugfix: in the "fastcgi_next_upstream" directive. Thanks to Lucas Molas. --- CHANGES | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'CHANGES') diff --git a/CHANGES b/CHANGES index 3a6b9466d..4d9e62aa6 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,17 @@ +Changes with nginx 1.4.7 18 Mar 2014 + + *) Security: a heap memory buffer overflow might occur in a worker + process while handling a specially crafted request by + ngx_http_spdy_module, potentially resulting in arbitrary code + execution (CVE-2014-0133). + Thanks to Lucas Molas, researcher at Programa STIC, Fundación Dr. + Manuel Sadosky, Buenos Aires, Argentina. + + *) Bugfix: in the "fastcgi_next_upstream" directive. + Thanks to Lucas Molas. + + Changes with nginx 1.4.6 04 Mar 2014 *) Bugfix: the "client_max_body_size" directive might not work when -- cgit v1.2.1