News for hackers. Stuff that matters.

A comment on Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11).

Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by ryanseys on Tuesday March 18, 2014 @07:48PM (#7425897)
It appears my Ubuntu server only updates nginx mainline to 1.5.11. I've disabled spdy support in my listen directive for now as an easier work around.
[ Parent | on HN ]
Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by atom7 on Tuesday March 18, 2014 @08:05PM (#7425980)
It's not affected on Debian/Ubuntu, check --with-debug flag.
[ Parent | on HN ]
Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by ryanseys on Tuesday March 18, 2014 @08:54PM (#7426164)
Thank you.
[ Parent | on HN ]
Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by atom7 on Tuesday March 18, 2014 @09:42PM (#7426337)
btw, I use packages from nginx.org, they're updated in time with every release: http://nginx.org/en/linux_packages.html
[ Parent | on HN ]
Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by voltagex_ on Wednesday March 19, 2014 @01:25AM (#7426972)
Do the upstream packages still use a different configuration path from the Debian/Ubuntu packages?
[ Parent | on HN ]
Re:Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11) by kijin on Wednesday March 19, 2014 @03:31AM (#7427222)
Yes. There's no sites-available or sites-enabled, and some configuration is split off into different files in the conf.d directory.
[ Parent | on HN ]