Nginx security advisory (CVE-2013-4547)

Re:Nginx security advisory (CVE-2013-4547) by BobVerg on Tuesday November 19, 2013 @04:21PM (#6764566)

It's _that_ old.

As I know, 1.2.x actually is obsoleted since May 2013, and there is no more support or bugfixes after this date.

[ Parent | on HN ]

Re:Nginx security advisory (CVE-2013-4547) by nashe on Tuesday November 19, 2013 @04:47PM (#6764738)

Unfortunately, Debian's stable version is 1.2.1.

[ Parent | on HN ]

Re:Nginx security advisory (CVE-2013-4547) by FooBarWidget on Tuesday November 19, 2013 @04:53PM (#6764779)

Just use third party APT packages.

You can either use the Phusion Passenger one: https://www.phusionpassenger.com/install_debian

Or the Nginx.org one: http://nginx.org/en/linux_packages.html

Both support Debian 6 and 7, and both supply the latest Nginx stable version.

[ Parent | on HN ]

Re:Nginx security advisory (CVE-2013-4547) by mappu on Tuesday November 19, 2013 @05:16PM (#6764901)

Debian does commit to security support for packages in main, i expect they will backport the patch to their current version and send notification from security-announce when an update is released. Also keep an eye on https://security-tracker.debian.org/tracker/CVE-2013-4547

[ Parent | on HN ]

Re:Nginx security advisory (CVE-2013-4547) by Fuxy on Wednesday November 20, 2013 @04:58AM (#6767178)

Ironically I'm getting an SSL error from them and it forces you to use https.

[ Parent | on HN ]

Re:Nginx security advisory (CVE-2013-4547) by BobVerg on Tuesday November 19, 2013 @11:39PM (#6766329)

Last time it took them six months to do so.

[ Parent | on HN ]