News for hackers. Stuff that matters.
Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by dperfect on Tuesday March 18, 2014 @03:18PM (#7424300)
I assume this only affects configurations with ngx_http_spdy_module enabled. Can anyone confirm whether or not that's the case?
Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by fletchowns on Tuesday March 18, 2014 @03:22PM (#7424333)
Yup, it's in the announcement: http://mailman.nginx.org/pipermail/nginx-announce/2014/00013...

The problem affects nginx 1.3.15 - 1.5.11, compiled with the ngx_http_spdy_module module (which is not compiled by default) and without --with-debug configure option, if the "spdy" option of the "listen" directive is used in a configuration file.