[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: nginx and CVE-2016-4450



On Fri, Jun 03, 2016 at 06:11:07PM -0700, James Lu wrote:
On 03/06/16 02:31 PM, Rodrigo Campos wrote:
Hi,

There is a security bug that affects nginx in jessie backports, CVE-2016-4450, and
that bug has been fixed in stable and unstable. Can it be fixed in jessie
backports too, please? :)



Thanks a lot,
Rodrigo


Hi everyone,

Seeing as this was a security update, I backported nginx locally on a
server running Jessie. The results are at
https://overdrivenetworks.com/f/nginx-1.10.1-1~bpo8+1/ (signed) if there
is any interest.

CC'ing the nginx maintainers as it's probably more reliable for them to
continue maintaining backports in the long run.


I have uploaded nginx 1.9.10-1~bpo8+2. We dont want to upload 1.10.X just
yet since we want to test dynamic module support a bit more.


Reply to: