升级nginx吧-CVE-2013-4547

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

For Existing Member Sign In

This topic created in 4542 days ago, the information mentioned may be changed or developed.

The problem affects nginx 0.8.41 - 1.5.6.

The problem is fixed in nginx 1.5.7, 1.4.4.

http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html

3 replies • 1970-01-01 08:00:00 +08:00

sdysj

Nov 20, 2013

nginx最近频频出CVE，真闹腾。。。

Nov 20, 2013

不用php的无所谓吧？

felix021

Nov 20, 2013

As a temporary workaround the following configuration
can be used in each server{} block:

if ($request_uri ~ " ") {
return 444;
}