Hash: SHA256

Package        : nginx
Version        : 1.2.1-2.2+wheezy4+deb7u1
CVE ID         : CVE-2017-7529
Debian Bug     : #868109

It was discovered that there was vulnerability in the range filter of nginx, a
web/proxy server. A specially crafted request might result in an integer
overflow and incorrect processing of HTTP ranges, potentially resulting in a
sensitive information leak.

For Debian 7 "Wheezy", this issue has been fixed in nginx version
1.2.1-2.2+wheezy4+deb7u1.

We recommend that you upgrade your nginx packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Debian LTS: DLA-1024-1: nginx security update

July 13, 2017
It was discovered that there was vulnerability in the range filter of nginx, a web/proxy server

Summary

For Debian 7 "Wheezy", this issue has been fixed in nginx version
1.2.1-2.2+wheezy4+deb7u1.

We recommend that you upgrade your nginx packages.


Regards,

- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
Package : nginx
Version : 1.2.1-2.2+wheezy4+deb7u1
CVE ID : CVE-2017-7529
Debian Bug : #868109

Related News