nginx1.11 linux,Nginx 1.10.1稳定版和Nginx 1.11.1发布

Nginx 1.10.1稳定版和Nginx 1.11.1发布

发布时间:2016-06-01 11:23:19来源:红联作者:baihuo

Nginx 1.10.1 稳定版和 Nginx 1.11.1 发布了。geng更新如下：

NULL pointer dereference while writing client request body

Severity: medium

Advisory

CVE-2016-4450

Not vulnerable: 1.11.1+, 1.10.1+

Vulnerable: 1.3.9-1.11.0

The patch pgp (for 1.9.13-1.11.0)

The patch pgp (for 1.3.9-1.9.12)

Invalid pointer dereference in resolver

Severity: medium

Advisory

CVE-2016-0742

Not vulnerable: 1.9.10+, 1.8.1+

Vulnerable: 0.6.18-1.9.9

Use-after-free during CNAME response processing in resolver

Severity: medium

Advisory

CVE-2016-0746

Not vulnerable: 1.9.10+, 1.8.1+

Vulnerable: 0.6.18-1.9.9

Insufficient limits of CNAME resolution in resolver

Severity: medium

Advisory

CVE-2016-0747

Not vulnerable: 1.9.10+, 1.8.1+

Vulnerable: 0.6.18-1.9.9

SSL session reuse vulnerability

Severity: medium

Advisory

CVE-2014-3616

Not vulnerable: 1.7.5+, 1.6.2+

Vulnerable: 0.5.6-1.7.4

STARTTLS command injection

Severity: medium

Advisory

CVE-2014-3556

Not vulnerable: 1.7.4+, 1.6.1+

Vulnerable: 1.5.6-1.7.3

The patch pgp

SPDY heap buffer overflow

Severity: major

Advisory

CVE-2014-0133

Not vulnerable: 1.5.12+, 1.4.7+

Vulnerable: 1.3.15-1.5.11

The patch pgp

SPDY memory corruption

Severity: major

Advisory

CVE-2014-0088

Not vulnerable: 1.5.11+

Vulnerable: 1.5.10

The patch pgp

Request line parsing vulnerability

Severity: medium

Advisory

CVE-2013-4547

Not vulnerable: 1.5.7+, 1.4.4+

Vulnerable: 0.8.41-1.5.6

The patch pgp

Memory disclosure with specially crafted HTTP backend responses

Severity: medium

Advisory

CVE-2013-2070

Not vulnerable: 1.5.0+, 1.4.1+, 1.2.9+

Vulnerable: 1.1.4-1.2.8, 1.3.9-1.4.0

The patch pgp (for 1.3.9-1.4.0)

The patch pgp (for 1.1.4-1.2.8)

Stack-based buffer overflow with specially crafted request

Severity: major

Advisory

CVE-2013-2028

Not vulnerable: 1.5.0+, 1.4.1+

Vulnerable: 1.3.9-1.4.0

The patch pgp

Vulnerabilities with Windows directory aliases

Severity: medium

Advisory

CVE-2011-4963

Not vulnerable: 1.3.1+, 1.2.1+

Vulnerable: nginx/Windows 0.7.52-1.3.0

Buffer overflow in the ngx_http_mp4_module

Severity: major

Advisory

CVE-2012-2089

Not vulnerable: 1.1.19+, 1.0.15+

Vulnerable: 1.1.3-1.1.18, 1.0.7-1.0.14

The patch pgp

Memory disclosure with specially crafted backend responses

Severity: major

Advisory

CVE-2012-1180

Not vulnerable: 1.1.17+, 1.0.14+

Vulnerable: 0.1.0-1.1.16

The patch pgp

Buffer overflow in resolver

Severity: medium

CVE-2011-4315

Not vulnerable: 1.1.8+, 1.0.10+

Vulnerable: 0.6.18-1.1.7

Vulnerabilities with invalid UTF-8 sequence on Windows

Severity: major

CVE-2010-2266

Not vulnerable: 0.8.41+, 0.7.67+

Vulnerable: nginx/Windows 0.7.52-0.8.40

Vulnerabilities with Windows file default stream

Severity: major

CVE-2010-2263

Not vulnerable: 0.8.40+, 0.7.66+

Vulnerable: nginx/Windows 0.7.52-0.8.39

Vulnerabilities with Windows 8.3 filename pseudonyms

Severity: major

CORE-2010-0121

Not vulnerable: 0.8.33+, 0.7.65+

Vulnerable: nginx/Windows 0.7.52-0.8.32

An error log data are not sanitized

Severity: none

CVE-2009-4487

Not vulnerable: none

Vulnerable: all

The renegotiation vulnerability in SSL protocol

Severity: major

VU#120541 CVE-2009-3555

Not vulnerable: 0.8.23+, 0.7.64+

Vulnerable: 0.1.0-0.8.22

The patch pgp

Directory traversal vulnerability

Severity: minor

CVE-2009-3898

Not vulnerable: 0.8.17+, 0.7.63+

Vulnerable: 0.1.0-0.8.16

Buffer underflow vulnerability

Severity: major

VU#180065 CVE-2009-2629

Not vulnerable: 0.8.15+, 0.7.62+, 0.6.39+, 0.5.38+

Vulnerable: 0.1.0-0.8.14

The patch pgp

Null pointer dereference vulnerability

Severity: major

CVE-2009-3896

Not vulnerable: 0.8.14+, 0.7.62+, 0.6.39+, 0.5.38+

Vulnerable: 0.1.0-0.8.13

The patch pgp

软件详情：http://git.oschina.net/mirrors/nginx

来自:开源中国社区