升级nginx吧-CVE-2013-4547

[megaforce]

The problem affects nginx 0.8.41 - 1.5.6.

The problem is fixed in nginx 1.5.7, 1.4.4.


http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html

[sdysj]

nginx最近频频出CVE，真闹腾。。。

[m]

不用php的无所谓吧？

[felix021]

As a temporary workaround the following configuration
can be used in each server{} block:

if ($request_uri ~ " ") {
return 444;
}