Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #227000

Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution

From <tomas@tuxteam.de>
Newsgroups linux.debian.user
Subject Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution
Date 2020-09-15 14:50 +0200
Message-ID <APizf-7nE-1@gated-at.bofh.it> (permalink)
References <APelX-51z-3@gated-at.bofh.it> <APelX-51z-1@gated-at.bofh.it> <APfBn-5Ge-13@gated-at.bofh.it> <APfBn-5Ge-15@gated-at.bofh.it> <APizf-7nE-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Tue, Sep 15, 2020 at 12:23:11PM +0000, Suryadevara, Revanth wrote:
> Hi  Klaus,
> 
> Just needed to re-confirm couple of things here
> 
> 1. I understand that the NGINX version shipped by default is secured and will be updated with patches should there be some security issues. But my question is, Can we expect the latest version of NGINX(i.e. v1.18.x) to be available in Debian 10, soon ? If yes, when ?

Debian doesn't change package versions in its stable release
(except exceptions, see Greg's post in this thread).

That's the meaning of "stable". Debian 10, aka Buster is
the current stable version [1]. So the answer is "most
probably not".

> 2.  Please provide some kind of confirmation on CVE-2020-11879
> 	If Vulnerability was already addressed, please point me to some article which confirms the same.
> 	If not addressed, please confirm on when can we expect 3.35.91 or greater version to be available in Debian 	10?

Well, you can do that yourself. Enter "CVE-2020-11879 site:debian.org"
into your favourite Internet search engine (which hopefully isn't
Google, but I disgress), you'll be lead to [2]. Follow the links
from there, and you'll get lots of information :-)

Cheers

[1] https://www.debian.org/releases/index.html
[2] https://security-tracker.debian.org/tracker/CVE-2020-11879

 - t

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 10:20 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Reco <recoverym4n@enotuniq.net> - 2020-09-15 11:40 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 11:40 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution <tomas@tuxteam.de> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Dan Ritter <dsr@randomstring.org> - 2020-09-15 15:00 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 15:40 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 15:50 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2020-09-15 16:00 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 13:40 +0200

csiph-web