[nginx] nginx-1.26.2-RELEASE

Sergey Kandaurov pluknet at nginx.com
Wed Aug 14 14:06:55 UTC 2024


details:   https://hg.nginx.org/nginx/rev/e4c5da06073c
branches:  stable-1.26
changeset: 9286:e4c5da06073c
user:      Sergey Kandaurov <pluknet at nginx.com>
date:      Mon Aug 12 18:25:45 2024 +0400
description:
nginx-1.26.2-RELEASE

diffstat:

 docs/xml/nginx/changes.xml |  18 ++++++++++++++++++
 1 files changed, 18 insertions(+), 0 deletions(-)

diffs (28 lines):

diff -r d1edb09453c6 -r e4c5da06073c docs/xml/nginx/changes.xml
--- a/docs/xml/nginx/changes.xml	Mon Aug 12 18:20:49 2024 +0400
+++ b/docs/xml/nginx/changes.xml	Mon Aug 12 18:25:45 2024 +0400
@@ -5,6 +5,24 @@
 <change_log title="nginx">
 
 
+<changes ver="1.26.2" date="2024-08-14">
+
+<change type="security">
+<para lang="ru">
+обработка специально созданного mp4-файла модулем ngx_http_mp4_module
+могла приводить к падению рабочего процесса (CVE-2024-7347).<br/>
+Спасибо Nils Bars.
+</para>
+<para lang="en">
+processing of a specially crafted mp4 file by the ngx_http_mp4_module
+might cause a worker process crash (CVE-2024-7347).<br/>
+Thanks to Nils Bars.
+</para>
+</change>
+
+</changes>
+
+
 <changes ver="1.26.1" date="2024-05-29">
 
 <change type="security">


More information about the nginx-devel mailing list