All errata/c7/ALT-PU-2014-1517-1
ALT-PU-2014-1517-1

Package update nginx in branch c7

Version1.4.7-alt1.M70P.1
Task#118506
Published2014-04-21
Max severityHIGH
Severity:

Closed issues (3)

BDU:2015-00636
MEDIUM5.1

Уязвимость программного обеспечения nginx, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Published: 2016-07-06Modified: 2016-11-28
CVSS 2.0MEDIUM 5.1
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:P
References
CVE-2013-4547
HIGH7.5

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

Published: 2013-11-23Modified: 2026-04-29
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
References
CVE-2014-0133
HIGH7.5

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

Published: 2014-03-28Modified: 2025-04-12
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
References

Closed bugs (5)

Bug #29607

При обновлении затирается файл /etc/nginx/sites-available.d/default.conf