Обновите, пожалуйста, пакет из сизифа. Там было несколько фиксов по безопастности.
nginx-1.0.4-alt0.M51.1 -> 5.1: * Fri Jul 22 2011 Michael Shigorin <mike@altlinux> 1.0.4-alt0.M51.1 - built for M51 for current security fixes (closes: #25944) * Wed Jun 01 2011 Anton Farygin <rider@altlinux> 1.0.4-alt1 - new version * Fri May 27 2011 Anton Farygin <rider@altlinux> 1.0.3-alt1 - new version * Wed Apr 13 2011 Anton Farygin <rider@altlinux> 1.0.0-alt2 - add cache_purge module * Tue Apr 12 2011 Michael Shigorin <mike@altlinux> 1.0.0-alt1 - 1.0.0 * Thu Feb 10 2011 Anton Farygin <rider@altlinux> 0.8.54-alt1 - updated to 0.8.54 - add nginx user to _webserver group (closes: #24938) * Wed Dec 01 2010 Anton Farygin <rider@altlinux> 0.8.53-alt4 - added patch from 0.9.0 with fix for memory violation in auth_basic * Tue Nov 30 2010 Anton Farygin <rider@altlinux> 0.8.53-alt3 - fixed build with new perl * Fri Nov 05 2010 Vladimir Lettiev <crux@altlinux> 0.8.53-alt2.1 - rebuilt with perl 5.12 * Tue Nov 02 2010 Slava Dubrovskiy <dubrsl@altlinux> 0.8.53-alt2 - add http_secure_link_module * Thu Oct 28 2010 Anton Farygin <rider@altlinux> 0.8.53-alt1 - new version