ZeroDay Findings
Sign inSign up

Technology hubs · Nginx

Nginx security fix timeline

Public commits from nginx/nginx whose messages cite a vulnerability or a security fix. Patch text is not stored.

Nginx hubVulnerability catalog

12 security-fix timeline events

  1. Aug 29, 2013

    Referer: fixed hostname buffer overflow check.

    Referer: fixed hostname buffer overflow check. Because of premature check the effective buffer size was 255 symbols while the buffer is able to handle 256.

    https://github.com/nginx/nginx/commit/6d7ec5009a585fbbfa01a1b02fe7116957bcf5f0

  2. Apr 12, 2012

    Fixed buffer overflow when long URI is processed by "try_files" in

    Fixed buffer overflow when long URI is processed by "try_files" in regex location with "alias" (fixes ticket #135).

    https://github.com/nginx/nginx/commit/3f25e1251725e6906b58b93caa7403f19b05868b