Mercurial > hg > nginx
comparison docs/xml/nginx/changes.xml @ 5195:0702de638a4c stable-1.4 release-1.4.1
nginx-1.4.1-RELEASE
| author | Maxim Dounin <mdounin@mdounin.ru> |
|---|---|
| date | Mon, 06 May 2013 14:20:27 +0400 |
| parents | 7809529022b8 |
| children | 50f065641b4c |
comparison
equal
deleted
inserted
replaced
| 5194:f1e993f6c11d | 5195:0702de638a4c |
|---|---|
| 1 <?xml version="1.0" ?> | 1 <?xml version="1.0" ?> |
| 2 <!DOCTYPE change_log SYSTEM "../../dtd/changes.dtd" > | 2 <!DOCTYPE change_log SYSTEM "../../dtd/changes.dtd" > |
| 3 | 3 |
| 4 | 4 |
| 5 <change_log title="nginx"> | 5 <change_log title="nginx"> |
| 6 | |
| 7 | |
| 8 <changes ver="1.4.1" date="07.05.2013"> | |
| 9 | |
| 10 <change type="security"> | |
| 11 <para lang="ru"> | |
| 12 при обработке специально созданного запроса | |
| 13 мог перезаписываться стек рабочего процесса, | |
| 14 что могло приводить к выполнению произвольного кода (CVE-2013-2028); | |
| 15 ошибка появилась в 1.3.9.<br/> | |
| 16 Спасибо Greg MacManus, iSIGHT Partners Labs. | |
| 17 </para> | |
| 18 <para lang="en"> | |
| 19 a stack-based buffer overflow might occur in a worker process | |
| 20 while handling a specially crafted request, | |
| 21 potentially resulting in arbitrary code execution (CVE-2013-2028); | |
| 22 the bug had appeared in 1.3.9.<br/> | |
| 23 Thanks to Greg MacManus, iSIGHT Partners Labs. | |
| 24 </para> | |
| 25 </change> | |
| 26 | |
| 27 </changes> | |
| 6 | 28 |
| 7 | 29 |
| 8 <changes ver="1.4.0" date="24.04.2013"> | 30 <changes ver="1.4.0" date="24.04.2013"> |
| 9 | 31 |
| 10 <change type="bugfix"> | 32 <change type="bugfix"> |