Mercurial > hg > nginx-site
diff text/en/CHANGES-1.4 @ 1012:f7fe7da742c6
nginx-1.5.7, nginx-1.4.4
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Tue, 19 Nov 2013 18:57:50 +0400 |
parents | d1fd983215f2 |
children | c4c7350041a0 |
line wrap: on
line diff
--- a/text/en/CHANGES-1.4 +++ b/text/en/CHANGES-1.4 @@ -1,4 +1,12 @@ +Changes with nginx 1.4.4 19 Nov 2013 + + *) Security: a character following an unescaped space in a request line + was handled incorrectly (CVE-2013-4547); the bug had appeared in + 0.8.41. + Thanks to Ivan Fratric of the Google Security Team. + + Changes with nginx 1.4.3 08 Oct 2013 *) Bugfix: a segmentation fault might occur in a worker process if the