From the Debian Security team (CVE-2009-2629):
nginx … is vulnerable to a buffer underflow when processing certain HTTP requests. An attacker can use this to execute arbitrary code with the rights of the worker process or possibly perform denial of service attacks by repeatedly crashing worker processes via a specially crafted URL in an HTTP request.
New versions of our nginx packages that address this security vulnerability are now available. nginx 0.6.39 (with the fair balancer module) is available from the Brightbox apt repositories – running the following command will get you the latest version:
sudo apt-get update
sudo apt-get install nginx
Our more experimental nginx-brightbox package has also been upgraded to 0.6.39. This includes a number of nginx addons, such as the upload module, geoip module, and Phusion Passenger 2.0.5.
nginx … is vulnerable to a buffer underflow when processing certain HTTP requests. An attacker can use this to execute arbitrary code with the rights of the worker process or possibly perform denial of service attacks by repeatedly crashing worker processes via a specially crafted URL in an HTTP request.
New versions of our nginx packages that address this security vulnerability are now available. nginx 0.6.39 (with the fair balancer module) is available from the Brightbox apt repositories – running the following command will get you the latest version:
sudo apt-get update
sudo apt-get install nginx
Our more experimental nginx-brightbox package has also been upgraded to 0.6.39. This includes a number of nginx addons, such as the upload module, geoip module, and Phusion Passenger 2.0.5.
7055
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
