Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora: 2009-12750 Critical: Nginx Multiple Security Fixes

fedora
Calendar Grey December 7, 2009
Scroller Fedora
-------------------------------------------------------------------------------- Fedora Update Notif

Summary

Nginx [engine x] is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3

proxy server written by Igor Sysoev.

ChangeLog:

* Fri Dec 4 2009 Jeremy Hinegardner - 0.7.64-1

- Update to new stable 0.7.64

* Thu Oct 29 2009 Jeremy Hinegardner - 0.7.63-1

- Update to new stable 0.7.63

- reinstate zlib dependency

References:

[ 1 ] Bug #539573 - CVE-2009-3555 CVE-2009-3896 CVE-2009-2629 Multiple nginx vulnerabilities [Fedora all]

https://bugzilla.redhat.com/show_bug.cgi?id=539573

This update can be installed with the "yum" update program. Use

su -c 'yum update nginx' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Topics%20covered

Topics Covered

security advisory fedora software update server critical fix threat mitigation nginx

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Name: nginx
Product: Fedora 12
Version: 0.7.64
Release: 1.fc12
URL: http://nginx.org/
Summary: Robust, small and high performance http and reverse proxy server

Topics%20covered

Topics Covered

security advisory fedora software update server critical fix threat mitigation nginx

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.