IntenseWebs/nginx
3
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2024-12-22 23:23:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

release-1.5.0-RELEASE

Browse Source
This commit is contained in:
Maxim Dounin 2013-05-06 13:52:36 +04:00
parent 818807d71e
commit 18f6d20cf7
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
docs/xml/nginx/changes.xml
View File

@ -5,6 +5,28 @@
<change_log title="nginx">
<changes ver="1.5.0" date="07.05.2013">
<change type="security">
<para lang="ru">
при обработке специально созданного запроса
мог перезаписываться стек рабочего процесса,
что могло приводить к выполнению произвольного кода (CVE-2013-2028);
ошибка появилась в 1.3.9.<br/>
Спасибо Greg MacManus, iSIGHT Partners Labs.
</para>
<para lang="en">
a stack-based buffer overflow might occur in a worker process
while handling a specially crafted request,
potentially resulting in arbitrary code execution (CVE-2013-2028);
the bug had appeared in 1.3.9.<br/>
Thanks to Greg MacManus, iSIGHT Partners Labs.
</para>
</change>
</changes>
<changes ver="1.4.0" date="24.04.2013">
<change type="bugfix">