Nginx security update

Re:Nginx security update by ck2 on Tuesday July 09, 2013 @09:11AM (#6012449)

Note that's for Debian distribution.

Patched source was actually posted back on May 7th and 13th for people who compile their own builds.

   2013-05-07 nginx-1.4.1 stable and nginx-1.5.0 development versions have been released, 
   with the fix for the stack-based buffer overflow security problem in nginx 1.3.9 - 1.4.0, 
   discovered by Greg MacManus, of iSIGHT Partners Labs (CVE-2013-2028). 

   2013-05-13 nginx-1.2.9 legacy version has been released, addressing the information 
   disclosure security problem in some previous nginx versions (CVE-2013-2070).

[ Parent | on HN ]

Re:Nginx security update by astrodust on Tuesday July 09, 2013 @10:41AM (#6012890)

So is 1.4.1 okay?

[ Parent | on HN ]

Re:Nginx security update by enduser on Tuesday July 09, 2013 @12:34PM (#6013521)

Yes

[ Parent | on HN ]

Re:Nginx security update by GibbyBorn on Tuesday July 09, 2013 @09:18AM (#6012489)

Well, debian guys are so slow. It's the most unsecure and unstable distribution.

[ Parent | on HN ]

Re:Nginx security update by antihero on Tuesday July 09, 2013 @10:07AM (#6012698)

We've had the fixed versions of the packages for quite some time.

[ Parent | on HN ]

Re:Nginx security update by philtar on Tuesday July 09, 2013 @12:15PM (#6013382)

What's the difference between wheezy and wheezy (security)?

https://security-tracker.debian.org/tracker/CVE-2013-2070

[ Parent | on HN ]

Re:Nginx security update by antihero on Friday July 12, 2013 @04:34AM (#6031594)

Wheezy is the base packages, security is security updates, which are enabled by default, and most sysadmins will enable automatic upgrading to.

[ Parent | on HN ]