Nginx 1.26.2 ืื•ืŸ 1.27.1 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืžื™ื˜ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืึธืก ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ngx_http_mp4_module

ื“ื™ ื”ื•ื™ืคึผื˜ ืฆื•ื•ื™ื™ึทื’ ืคื•ืŸ nginx 1.27.1 ืื™ื– ื‘ืืคืจื™ื™ื˜, ืื™ืŸ ื•ื•ืึธืก ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื ื™ื™ึทืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ื”ืืœื˜, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ืคึผืึทืจืึทืœืขืœ ื’ืขืฉื˜ื™ืฆื˜ ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ึทื’ ืคื•ืŸ nginx 1.22.1, ื•ื•ืึธืก ื‘ืœื•ื™ื– ื™ื ืงืœื•ื“ื– ืขื ื“ืขืจื•ื ื’ืขืŸ ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ื™ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ืขืจื ืกื˜ ืขืจืจืึธืจืก ืื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ื“ื™ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืคืึทืจืจื™ื›ื˜ืŸ ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2024-7347) ืื™ืŸ ื“ื™ ngx_http_mp4_module ืžืึธื“ื•ืœืข, ื•ื•ืึธืก ืคื™ืจื˜ ืฆื• ืึท ืึทื‘ื ืึธืจืžืึทืœ ื˜ืขืจืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื•ื•ืึธืจืงืคืœืึธื•ื• ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืึท ืกืคึผืขืฆื™ืขืœ ืคืึธืจืžืึทื˜ื˜ืขื“ MP4 ื˜ืขืงืข. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืกื˜ืึทืจื˜ื™ื ื’ ืคื•ืŸ ืžืขืœื“ื•ื ื’ 1.5.13 ื•ื•ืขืŸ ืื™ืจ ื‘ื•ื™ืขืŸ nginx ืžื™ื˜ ื“ื™ ngx_http_mp4_module ืžืึธื“ื•ืœืข (ื ื™ื˜ ื’ืขื‘ื•ื™ื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜) ืื•ืŸ ื ื™ืฆืŸ ื“ื™ mp4 ื“ื™ืจืขืงื˜ื™ื•ื• ืื™ืŸ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก. ืฆื• ืคืึทืจืจื™ื›ื˜ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืขืœื˜ืขืจืข ื•ื•ืขืจืกื™ืขืก, ืื™ืจ ืงืขื ืขืŸ ื ื•ืฆืŸ ืึท ืœืึทื˜ืข.

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ื“ื™ nginx 1.27.1 ืžืขืœื“ื•ื ื’ ืื•ื™ืš ืคืึทืจืคืขืกื˜ื™ืงื˜ ืขืจืจืึธืจืก ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื”ื˜ื˜ืคึผ / 3 ืคึผืจืึธื˜ืึธืงืึธืœ, ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ื“ื™ ื”ืึทื ื“ืœืขืจ ืื™ืŸ ื“ื™ ื˜ื™ื™ึทืš ืžืึธื“ื•ืœืข ืฆื• ื“ืขืจ ืงืึทื˜ืขื’ืึธืจื™ืข ืคื•ืŸ โ€‹โ€‹ืึทืคึผืฉืึทื ืึทืœ, ืื•ืŸ ืกืึทืœื•ื•ื“ ื“ื™ ืคึผืจืึธื‘ืœืขื ืžื™ื˜ ืื™ื’ื ืึธืจื™ืจืŸ ื ื™ื™ึท ื”ื˜ื˜ืคึผ / 2 ืงืึทื ืขืงืฉืึทื ื– ื•ื•ืขืŸ ืึทืจื‘ืขื˜ืขืจ ืคึผืจืึทืกืขืกืึทื– ืคืึทืจืขื ื“ื™ืงืŸ ืกืžื•ื“ืœื™.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’