Welcome! Log In Create A New Profile


[nginx] nginx-1.20.1-RELEASE

Maxim Dounin
May 25, 2021 11:36AM
details: https://hg.nginx.org/nginx/rev/39a422cf9876
branches: stable-1.20
changeset: 7864:39a422cf9876
user: Maxim Dounin <mdounin@mdounin.ru>
date: Tue May 25 15:35:38 2021 +0300


docs/xml/nginx/changes.xml | 26 ++++++++++++++++++++++++++
1 files changed, 26 insertions(+), 0 deletions(-)

diffs (36 lines):

diff -r 3e78c12d4f37 -r 39a422cf9876 docs/xml/nginx/changes.xml
--- a/docs/xml/nginx/changes.xml Tue May 25 15:17:50 2021 +0300
+++ b/docs/xml/nginx/changes.xml Tue May 25 15:35:38 2021 +0300
@@ -5,6 +5,32 @@
<change_log title="nginx">

+<changes ver="1.20.1" date="2021-05-25">
+<change type="security">
+<para lang="ru">
+при использовании директивы resolver
+во время обработки ответа DNS-сервера
+могла происходить перезапись одного байта памяти,
+что позволяло атакующему,
+имеющему возможность подделывать UDP-пакеты от DNS-сервера,
+вызвать падение рабочего процесса
+или, потенциально, выполнение произвольного кода (CVE-2021-23017).
+<para lang="en">
+1-byte memory overwrite might occur
+during DNS server response processing
+if the "resolver" directive was used,
+allowing an attacker
+who is able to forge UDP packets from the DNS server
+to cause worker process crash
+or, potentially, arbitrary code execution (CVE-2021-23017).
<changes ver="1.20.0" date="2021-04-20">

nginx-devel mailing list
Subject Author Views Posted

[nginx] nginx-1.20.1-RELEASE

Maxim Dounin 179 May 25, 2021 11:36AM

Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 65
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready