The problem affects nginx 1.3.9 – 1.11.0.
The problem is fixed in nginx 1.11.1, 1.10.1.
Nginx 1.11.1 for Windows (32-bit and 64-bit builds) are now available for free download. As always, packages are built from the upstream mainline branch. Nginx (pronounced “engine x”) is a high performance web server, caching proxy and a Layer 7 load balancing solution. Millions of web sites on the Internet use and benefit from Nginx because of its extreme performance, scalability, reliability, flexibility, and security.
On 2016-05-31, the mainline version of Nginx 1.11.1 was released at nginx.org. The upstream changelog is as follows:
Changes with nginx 1.11.1 — 31 May 2016
- ) Security: a segmentation fault might occur in a worker process while writing a specially crafted request body to a temporary file (CVE-2016-4450); the bug had appeared in 1.3.9.
—
Maxim Dounin
These Windows install files are provided to support legacy users who still use the Cygwin based builds. Before nginx.org starting providing native Windows packages, these were the only way to run Nginx on Windows. Now, official native Windows builds are available and supported at nginx.org. Please use those if you are new to Nginx on Windows. Once again, they are fully supported and available for download at nginx.org.
Download Nginx 1.11.1 for Windows (32-bit & 64-bit versions) here.
Check out the FAQ: Frequently Asked Questions. The answers may help you. If you have other questions that are not on the FAQ, please feel free to ask, or leave a comment, below. Thank you.
The Nginx Bundle for Windows is an easy to set up and easy to use software package consisting of Nginx, MariaDB, and PHP for the Microsoft Windows platform.