| tag name | v1.0.15 (3dbdfe8df938c80cccc82511e1d4d88138a152e7) |
| tag date | 2012-04-12 13:05:40 +0000 |
| tagged by | Jon Kolb <jon@b0g.us> |
| tagged object | commit 1554f54c85... |
| download | nginx-1.0.15.tar.gz |
|---|
Changes with nginx 1.0.15 12 Apr 2012
*) Security: specially crafted mp4 file might allow to overwrite memory
locations in a worker process if the ngx_http_mp4_module was used,
potentially resulting in arbitrary code execution (CVE-2012-2089).
Thanks to Matthew Daley.
*) Bugfix: in the ngx_http_mp4_module.