Mercurial > hg > nginx-site

diff text/en/CHANGES-1.4 @ 1012:f7fe7da742c6

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
nginx-1.5.7, nginx-1.4.4
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 19 Nov 2013 18:57:50 +0400
parents d1fd983215f2
children c4c7350041a0
line wrap: on
line diff
--- a/text/en/CHANGES-1.4	Tue Nov 19 17:08:49 2013 +0400
+++ b/text/en/CHANGES-1.4	Tue Nov 19 18:57:50 2013 +0400
@@ -1,4 +1,12 @@
 
+Changes with nginx 1.4.4                                         19 Nov 2013
+
+    *) Security: a character following an unescaped space in a request line
+       was handled incorrectly (CVE-2013-4547); the bug had appeared in
+       0.8.41.
+       Thanks to Ivan Fratric of the Google Security Team.
+
+
 Changes with nginx 1.4.3                                         08 Oct 2013
 
     *) Bugfix: a segmentation fault might occur in a worker process if the