seeing is believing

Debian Security Advisory 3908-1

Debian Security Advisory 3908-1
Posted Jul 14, 2017
Authored by Debian | Site debian.org

Debian Linux Security Advisory 3908-1 - An integer overflow has been found in the HTTP range module of Nginx, a high-performance web and reverse proxy server, which may result in information disclosure.

tags | advisory, web, overflow, info disclosure
systems | linux, debian
advisories | CVE-2017-7529
MD5 | 2d367b8f14fc73b9768c34d3df9ea843

Debian Security Advisory 3908-1

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3908-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
July 12, 2017 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : nginx
CVE ID : CVE-2017-7529

An integer overflow has been found in the HTTP range module of Nginx, a
high-performance web and reverse proxy server, which may result in
information disclosure.

For the oldstable distribution (jessie), this problem has been fixed
in version 1.6.2-5+deb8u5.

For the stable distribution (stretch), this problem has been fixed in
version 1.10.3-1+deb9u1.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your nginx packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=uZZa
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    2 Files
  • 2
    Jul 2nd
    3 Files
  • 3
    Jul 3rd
    15 Files
  • 4
    Jul 4th
    4 Files
  • 5
    Jul 5th
    15 Files
  • 6
    Jul 6th
    15 Files
  • 7
    Jul 7th
    10 Files
  • 8
    Jul 8th
    2 Files
  • 9
    Jul 9th
    10 Files
  • 10
    Jul 10th
    15 Files
  • 11
    Jul 11th
    15 Files
  • 12
    Jul 12th
    19 Files
  • 13
    Jul 13th
    16 Files
  • 14
    Jul 14th
    15 Files
  • 15
    Jul 15th
    3 Files
  • 16
    Jul 16th
    2 Files
  • 17
    Jul 17th
    8 Files
  • 18
    Jul 18th
    11 Files
  • 19
    Jul 19th
    15 Files
  • 20
    Jul 20th
    15 Files
  • 21
    Jul 21st
    15 Files
  • 22
    Jul 22nd
    7 Files
  • 23
    Jul 23rd
    1 Files
  • 24
    Jul 24th
    19 Files
  • 25
    Jul 25th
    1 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close