Secure testing team - Jul 2010 - Bug#590768: CVE-2010-2266: Denial of service

Package: nginx
Severity: grave
Tags: security

Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2266

There''s no further information so far. Probably upstream should be
contacted next.

Cheers,
        Moritz

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, ''unstable'')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages nginx depends on:
ii  libc6                   2.11.2-2         Embedded GNU C Library: Shared lib
ii  libpcre3                8.02-1           Perl 5 Compatible Regular Expressi
ii  libssl0.9.8             0.9.8o-1         SSL shared libraries
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

nginx recommends no packages.

nginx suggests no packages.