similar to: nginx security advisory (CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200)

Hello! В реализации HTTP/3 в nginx были обнаружены четыре проблемы, которые позволяют атакующему с помощью специально созданной QUIC-сессии вызвать падение рабочего процесса (CVE-2024-31079, CVE-2024-32760, CVE-2024-35200), отправку клиенту части содержимого памяти рабочего процесса на системах с MTU больше 4096 байт (CVE-2024-34161), а также потенциально могут иметь другие последствия

Изменения в nginx 1.27.0 29.05.2024 *) Безопасность: при использовании HTTP/3 обработка специально созданной QUIC-сессии могла приводить к падению рабочего процесса, отправке клиенту содержимого памяти рабочего процесса на системах с MTU больше 4096 байт, а также потенциально могла иметь другие последствия (CVE-2024-32760,

Changes with nginx 1.27.0 29 May 2024 *) Security: when using HTTP/3, processing of a specially crafted QUIC session might cause a worker process crash, worker process memory disclosure on systems with MTU larger than 4096 bytes, or might have potential other impact (CVE-2024-32760, CVE-2024-31079, CVE-2024-35200, CVE-2024-34161).

Changes with nginx 1.26.1 29 May 2024 *) Security: when using HTTP/3, processing of a specially crafted QUIC session might cause a worker process crash, worker process memory disclosure on systems with MTU larger than 4096 bytes, or might have potential other impact (CVE-2024-32760, CVE-2024-31079, CVE-2024-35200, CVE-2024-34161).

Изменения в nginx 1.26.1 29.05.2024 *) Безопасность: при использовании HTTP/3 обработка специально созданной QUIC-сессии могла приводить к падению рабочего процесса, отправке клиенту содержимого памяти рабочего процесса на системах с MTU больше 4096 байт, а также потенциально могла иметь другие последствия (CVE-2024-32760,

Back in July, this error was discussed briefly on the mailing list(s). It appears that a fix (r238182) was submitted for inclusion in 9.1 (early). This problem still appears in 9.1-RC1. Will the fix be included in 9.1-RELEASE (or better yet 9.1-RC2)? Thanks. David Boyd. ---------------------------------------------------------------------------- ------ 1st e-mail from pluknet responding to

Hi guys, I can't see virtio in releng/9.1, is there any particular reason why it isn't going to be included given that it works reasonable well (and is optional anyway, so not likely to be detrimental)? Thanks, Joe

Изменения в nginx 1.25.5 16.04.2024 *) Добавление: виртуальные сервера в модуле stream. *) Добавление: модуль ngx_stream_pass_module. *) Добавление: параметры deferred, accept_filter и setfib директивы listen в модуле stream. *) Добавление: определение размера строки кеша процессора для некоторых архитектур. Спасибо

Changes with nginx 1.25.5 16 Apr 2024 *) Feature: virtual servers in the stream module. *) Feature: the ngx_stream_pass_module. *) Feature: the "deferred", "accept_filter", and "setfib" parameters of the "listen" directive in the stream module. *) Feature: cache line size detection for some

On Dec 27, 2017, at 15:40, m.roth at 5-cent.us wrote: > > I'm trying to build a package to create a directory and install some > files. My rpmbuild keeps failing, unable to cd into the directory, "no > such". Now, in the tmpfile, I *see* it cd'ing into BUILD/opt, and the > source was unzipped and untared into BUILD/opt/smipmicfg-1.27.0. In the > spec file,

Stephen John Smoogen wrote: > On Wed, Dec 27, 2017 at 3:41 PM <m.roth at 5-cent.us> wrote: > >> I'm trying to build a package to create a directory and install some >> files. My rpmbuild keeps failing, unable to cd into the directory, "no >> such". Now, in the tmpfile, I *see* it cd'ing into BUILD/opt, and the >> source was unzipped and untared

I'm trying to build a package to create a directory and install some files. My rpmbuild keeps failing, unable to cd into the directory, "no such". Now, in the tmpfile, I *see* it cd'ing into BUILD/opt, and the source was unzipped and untared into BUILD/opt/smipmicfg-1.27.0. In the spec file, I've even added a cd $RPM_BUILD_ROOT/opt, and I see it cd to there... and then it

Hi all. I prefer to build all ports in /tmp, which is actually a tmpfs filesystem. I have 8G partition. But when I tried to compile Apache OpenOffice system starts shooting processes when I was near 6G of swap. Oct 11 18:12:32 ar1l0u kernel: swap zone exhausted, increase kern.maxswzone Oct 11 18:12:32 ar1l0u kernel: pid 1334 (java), uid 818, was killed: out of swap space Oct 11 18:12:32

There is an error in the chmod(1) man page. tingo at kg-v2$ uname -a FreeBSD kg-v2.kg4.no 8.3-STABLE FreeBSD 8.3-STABLE #6: Fri Apr 27 23:50:55 CEST 2012 root at kg-v2.kg4.no:/usr/obj/usr/src/sys/GENERIC amd64 tingo at kg-v2$ apropos ^sticky sticky(7) - sticky text and append-only directories tingo at kg-v2$ man 1 chmod | grep sticky 1000 (the sticky bit). See chmod(2)

Hi, I am trying to achieve Stateless NAT with ip rule and ip route. Thanks to LARTC doc, I have done it :) But, I have a lot of client wanted access to Internet, setting up 2 rules for each of them is not desirable. For example I have 2 clients: Current setting: [root@son-ag webauth]# ip ru 0: from all lookup local 32760: from 192.168.8.113 lookup main map-to 192.168.250.113 32761:

I'm not reporting a bug (I know it's not the right place to do that anyway), but a little help would be appreciated. Once again I run into the famous "compiz: GLX_EXT_texture_from_pixmap is missing" error. The problem is I can't figure out what's wrong. I use fedora core 6 on an athlon XP with an ati RV250 and the radeon open-source drivers running compiz reports: $

Hi all, I have a GXP2000 with BLF configured. I follow the configuration guide to enable the pickup cmd as follow and include it under corresponding content. [BLF_group_pickup] exten => _**1XX,1,Pickup(${EXTEN:2}) exten => _**1XX,n,Hangup The I press the single key to pickup the call to extension 100 when there is a call to it. From CLI, I can see it issue **100 to asterisk but failed

Guys, I've heard about some absurd RAM requirements for 9.1, has anybody tested it? e.g. http://forums.freebsd.org/showthread.php?t=36314 -- View this message in context: http://freebsd.1045724.n5.nabble.com/9-1-minimal-ram-requirements-tp5771583.html Sent from the freebsd-stable mailing list archive at Nabble.com.

I have been experimenting with dirhash settings, and have scoured the internet for other peoples' experience with it. (I found the performance improvement in compiling has forestalled the need to add an SSD drive. ;-) I believe that increasing the following values by 10 would benefit most FreeBSD users without disadvantage. vfs.ufs.dirhash_maxmem: 2097152 to 20971520

Could you direct me to a newbie-friendly instructions for installing the latest versions of R and RStudio on Linux Mint 21.2? I followed instructions I could find, but no luck with managing to get RStudio (tho I did install R). System: Kernel: 6.2.0-39-generic x86_64 bits: 64 compiler: N/A Desktop: MATE 1.26.0 Distro: Linux Mint 21.2 Victoria base: Ubuntu 22.04 jammy I was able to install