web服务器Nginx发布1.6.2。2014-09-16。上个版本2014-08-05的1.6.1 遗留稳定版1.4.7/1.2.9/1.0.15.开发版1.7.5 修正了一个SSL相关的安全漏洞(CVE-2014-3616)，以及两个DNS可能导致请求挂起Bug(1.5.8引入）。 完全改进： Changes with nginx 1.6.2 16 Sep 2014 *) Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple "server" blocks (CVE-2014-3616). Thanks to Antoine Delignat-Lavaud. *) Bugfix: requests might hang if resolver was used and a DNS server returned a malformed response; the bug had appeared in 1.5.8. *) Bugfix: requests might hang if resolver was used and a timeout occurred during a DNS request. 下载：http://nginx.org/download/nginx-1.6.2.tar.gz |
