Nginx Security Update For All Nginx installations upto version 1.4.0

Category : Linux Helpline (Easy Guide)
Posted on : Apr 09, 2019
Views : 2,788
By : Zane P.

Greg MacManus, of iSIGHT Partners Labs, found a security problem
in several recent versions of nginx. A stack-based buffer
overflow might occur in a worker process while handling a
specially crafted request, potentially resulting in arbitrary code
execution (CVE-2013-2028).

The problem affects nginx 1.3.9 – 1.4.0.

The problem is fixed in nginx 1.5.0, 1.4.1.

Patch for the problem can be found here:

http://nginx.org/download/patch.2013.chunked.txt

As a temporary workaround the following configuration

can be used in each server{} block

    if ($http_transfer_encoding ~* chunked) {
        return 444;
    }

UPDATE YOUR CPNGINX :

For updating the cPnginx run the following commands,

# /scripts/installnginx --version=1.4.1

UPDATE YOUR DANGINX :

For updating the Danginx please run the following command,

 
# /usr/local/directadmin/scripts/installnginx --version=1.4.1

Previous Post
CSF Directadmin Issue Permission denied – Solved

Next Post
How to configure Zimbra + CSF – The Best Zimbra Firewall Configuration

Archive Calendar

Sat	Sun	Mon	Tue	Wed	Thu	Fri
	1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31

Born in 2004 ... Trusted By Clients n' Experts

We're operating a worldwide network of servers with high quality standards requirements, we’ve choose hostseo to be our perfect partner.

It’s very comfortable to know I can rely about all technical issues on Hostseo and mostly that my website and emails are safe and secured here.

With hostseo as a hosting partner we are more flexible and save money due to the better packages with great pricing, free SEO n' free SSL too!

They never made me feel silly for asking questions. Help me understand how to attract more people and improve my search engine ranking.

Took advantage of Hostseo's superb tech support and I must say, it is a very perfect one. It is very fast, servers reliability is incredible.

We're operating a worldwide network of servers with high quality standards requirements, we’ve choose hostseo to be our perfect partner.

It’s very comfortable to know I can rely about all technical issues on Hostseo and mostly that my website and emails are safe and secured here.

With hostseo as a hosting partner we are more flexible and save money due to the better packages with great pricing, free SEO n' free SSL too!

They never made me feel silly for asking questions. Help me understand how to attract more people and improve my search engine ranking.

Took advantage of Hostseo's superb tech support and I must say, it is a very perfect one. It is very fast, servers reliability is incredible.

We're operating a worldwide network of servers with high quality standards requirements, we’ve choose hostseo to be our perfect partner.

HostSEO Blog