Tengine-2.2.3

chobits released this 05 Sep 07:36

BUGFIX

Security: fixed CVE-2018-16843, CVE-2018-16844 and CVE-2018-16845. (chobits)
import from nginx official:

    *) Security: when using HTTP/2 a client might cause excessive memory
       consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).

    *) Security: processing of a specially crafted mp4 file with the
       ngx_http_mp4_module might result in worker process memory disclosure
       (CVE-2018-16845).

Assets 2