News for hackers. Stuff that matters.

A comment on Nginx security advisory (CVE-2013-4547). Parent comment

Re:Nginx security advisory (CVE-2013-4547) by nashe on Tuesday November 19, 2013 @04:47PM (#6764738)
Unfortunately, Debian's stable version is 1.2.1.
[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by FooBarWidget on Tuesday November 19, 2013 @04:53PM (#6764779)
Just use third party APT packages.

You can either use the Phusion Passenger one: https://www.phusionpassenger.com/install_debian

Or the Nginx.org one: http://nginx.org/en/linux_packages.html

Both support Debian 6 and 7, and both supply the latest Nginx stable version.

[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by mappu on Tuesday November 19, 2013 @05:16PM (#6764901)
Debian does commit to security support for packages in main, i expect they will backport the patch to their current version and send notification from security-announce when an update is released. Also keep an eye on https://security-tracker.debian.org/tracker/CVE-2013-4547
[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by Fuxy on Wednesday November 20, 2013 @04:58AM (#6767178)
Ironically I'm getting an SSL error from them and it forces you to use https.
[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by BobVerg on Tuesday November 19, 2013 @11:39PM (#6766329)
Last time it took them six months to do so.
[ Parent | on HN ]