[nginx] svn commit: r4591 - branches/stable-1.0/docs/xml/nginx

[mdounin at mdounin.ru]

Author: mdounin
Date: 2012-04-12 13:00:53 +0000 (Thu, 12 Apr 2012)
New Revision: 4591
URL: http://trac.nginx.org/nginx/changeset/4591/nginx

Log:
nginx-1.0.15-RELEASE


Modified:
   branches/stable-1.0/docs/xml/nginx/changes.xml

Modified: branches/stable-1.0/docs/xml/nginx/changes.xml
===================================================================
--- branches/stable-1.0/docs/xml/nginx/changes.xml	2012-04-12 12:55:43 UTC (rev 4590)
+++ branches/stable-1.0/docs/xml/nginx/changes.xml	2012-04-12 13:00:53 UTC (rev 4591)
@@ -9,6 +9,36 @@
 <title lang="en">nginx changelog</title>
 
 
+<changes ver="1.0.15" date="12.04.2012">
+
+<change type="security">
+<para lang="ru">
+при обработке специально созданного mp4 файла модулем ngx_http_mp4_module
+могли перезаписываться области памяти рабочего процесса, что могло
+приводить к выполнению произвольного кода (CVE-2012-2089).<br/>
+Спасибо Matthew Daley.
+</para>
+<para lang="en">
+specially crafted mp4 file might allow to overwrite
+memory locations in a worker process
+if the ngx_http_mp4_module was used,
+potentially resulting in arbitrary code execution (CVE-2012-2089).<br/>
+Thanks to Matthew Daley.
+</para>
+</change>
+
+<change type="bugfix">
+<para lang="ru">
+в модуле ngx_http_mp4_module.
+</para>
+<para lang="en">
+in the ngx_http_mp4_module.
+</para>
+</change>
+
+</changes>
+
+
 <changes ver="1.0.14" date="15.03.2012">
 
 <change type="security">