Mercurial > hg > nginx-site

diff text/en/CHANGES-1.2 @ 904:22bd9315e047

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
nginx-1.2.9
author Maxim Dounin <mdounin@mdounin.ru>
date Mon, 13 May 2013 15:23:37 +0400
parents 9c9db73443e6
children
line wrap: on
line diff
--- a/text/en/CHANGES-1.2	Mon May 13 07:37:59 2013 +0000
+++ b/text/en/CHANGES-1.2	Mon May 13 15:23:37 2013 +0400
@@ -1,4 +1,11 @@
 
+Changes with nginx 1.2.9                                         13 May 2013
+
+    *) Security: contents of worker process memory might be sent to a client
+       if HTTP backend returned specially crafted response (CVE-2013-2070);
+       the bug had appeared in 1.1.4.
+
+
 Changes with nginx 1.2.8                                         02 Apr 2013
 
     *) Bugfix: new sessions were not always stored if the "ssl_session_cache