作者:手机用户2502889731 | 来源:互联网 | 2014-08-06 09:41
程序员必上的开发者服务平台 —— DevStore
web服务器Nginx发布1.6.1。2014-08-05。这是2014-04-24 1.6
stable后第一个补丁版。遗留稳定版1.4.7/1.2.9/1.0.15.修正了一个STARTTLS相关安全漏洞(CVE-
2014-3556),以及$uri变量和smtp_auth指令的2个Bug.同时发布了1.7.4开发版。
完全改进:
Changes with nginx 1.6.1 05 Aug 2014
*) Security: pipelined commands were not discarded after STARTTLS
command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6.
Thanks to Chris Boulton.
*) Bugfix: the $uri variable might contain garbage when returning errors
with code 400.
Thanks to Sergey Bobrov.
*) Bugfix: in the "none" parameter in the "smtp_auth" directive; the bug
had appeared in 1.5.6.
Thanks to Svyatoslav Nikolsky.
下载:http://nginx.org/download/nginx-1.6.1.tar.gz