Mercurial > hg > nginx-site

diff text/en/CHANGES @ 899:012feca3d85f

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
nginx-1.5.0, nginx-1.4.1
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 07 May 2013 15:06:38 +0400
parents 22f93c9f4b55
children 31ed5c0a348b
line wrap: on
line diff
--- a/text/en/CHANGES	Sat May 04 23:04:53 2013 +0400
+++ b/text/en/CHANGES	Tue May 07 15:06:38 2013 +0400
@@ -1,4 +1,13 @@
 
+Changes with nginx 1.5.0                                         07 May 2013
+
+    *) Security: a stack-based buffer overflow might occur in a worker
+       process while handling a specially crafted request, potentially
+       resulting in arbitrary code execution (CVE-2013-2028); the bug had
+       appeared in 1.3.9.
+       Thanks to Greg MacManus, iSIGHT Partners Labs.
+
+
 Changes with nginx 1.4.0                                         24 Apr 2013
 
     *) Bugfix: nginx could not be built with the ngx_http_perl_module if the