# Tengine-1.5.2 is released (fix CVE-2013-4547)

**URL:** <https://www.ruby-forum.com/t/tengine-1-5-2-is-released-fix-cve-2013-4547/237644>\
**Category:** NGINX\
**Created:** [November 22, 2013, 12:06pm UTC](https://www.ruby-forum.com/t/tengine-1-5-2-is-released-fix-cve-2013-4547/237644 "2013-11-22T12:06:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Detlef\_R](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/58f4c7/32.png) [@Detlef\_R](https://www.ruby-forum.com/u/Detlef_R)\
**Post date:** [November 22, 2013, 12:06pm UTC](https://www.ruby-forum.com/t/tengine-1-5-2-is-released-fix-cve-2013-4547/237644/1 "2013-11-22T12:06:46Z")

</div>

Hi folks,

Tengine-1.5.2 (stable version) has been released.  
You can either checkout the source code from github:  
[GitHub - alibaba/tengine at stable](https://github.com/alibaba/tengine/tree/stable) or download the tar  
ball directly:  
[http://tengine.taobao.org/download/tengine-1.5.2.tar.gz](http://tengine.taobao.org/download/tengine-1.5.2.tar.gz)

We have fixed the security problem CVE-2013-4547. A character  
following an unescaped space in a request line was handled  
incorrectly. This bug had appeared since 1.2.0.

The full change log follows below:  
\*) Security: a character following an unescaped space in a request  
line  
was handled incorrectly (CVE-2013-4547); the bug had appeared in  
0.8.41. Thanks to Ivan Fratric of the Google Security Team.

\*) Bugfix: fix a bug of ‘nodelay’ might be ignored in limit\_req module.  
(cfsego)

\*) Bugfix: fix a bug in trim module when processing javascript comment.  
(taoyuanyuan)

For those who don’t know Tengine, it is a free and open source  
distribution of Nginx with some advanced features. See our website for  
more details: [http://tengine.taobao.org](http://tengine.taobao.org)

Regards,

–  
Weibin Y.  
Developer @ Server Platform Team of Taobao