web服务器Nginx发布1.6.1。2014-08-05。这是2014-04-24 1.6 stable后第一个补丁版。遗留稳定版1.4.7/1.2.9/1.0.15.修正了一个STARTTLS相关安全漏洞（CVE- 2014-3556）,以及$uri变量和smtp_auth指令的2个Bug.同时发布了1.7.4开发版。 完全改进： Changes with nginx 1.6.1 05 Aug 2014 *) Security: pipelined commands were not discarded after STARTTLS command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6. Thanks to Chris Boulton. *) Bugfix: the $uri variable might contain garbage when returning errors with code 400. Thanks to Sergey Bobrov. *) Bugfix: in the "none" parameter in the "smtp_auth" directive; the bug had appeared in 1.5.6. Thanks to Svyatoslav Nikolsky. 下载：http://nginx.org/download/nginx-1.6.1.tar.gz |
