Welcome! Log In Create A New Profile

Advanced

Re: Vulnerability related Doubts in Nginx

All files from this thread

File Name File Size   Posted by Date  
nginx-vul.png 60.1 KB open | download Zeal Vora 03/22/2016 Read message
Maxim Konovalov
March 22, 2016 08:32AM
On 3/22/16 3:17 PM, Zeal Vora wrote:
> @Maxim :-
>
> Thanks. Actually we compile Nginx so to include additional modules.
> The solution mentioned in Amazon page is " yum update nginx " is
> something which will not help as we will need the tar.gz / SRPM file
> for that version.
>
> @Valentin :-
>
> Thanks, actually we already have 1.8.1 but the reported fix is
> in nginx-1.8.1-1.26 for which I can't find any SRPM / tar.gz file.
>
The nessus report is about the package version. "nginx-1.8.1-1.26"
is something AWS specific, it doesn't come from nginx.org.

If you built your own package or compiled nginx from the nginx.org
sources you are safe with 1.8.1.

--
Maxim Konovalov

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Vulnerability related Doubts in Nginx Attachments

Zeal Vora March 22, 2016 08:32AM

Re: Vulnerability related Doubts in Nginx

Maxim Konovalov March 22, 2016 08:14AM

Re: Vulnerability related Doubts in Nginx

Valentin V. Bartenev March 22, 2016 08:14AM

Re: Vulnerability related Doubts in Nginx

Zeal Vora March 22, 2016 08:18AM

Re: Vulnerability related Doubts in Nginx

Maxim Konovalov March 22, 2016 08:32AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 114
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready