Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution

From	Greg Wooledge <wooledg@eeg.ccf.org>
Newsgroups	linux.debian.user
Subject	Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution
Date	2020-09-15 13:40 +0200
Message-ID	<APhtv-6MA-1@gated-at.bofh.it> (permalink)
References	<APelX-51z-3@gated-at.bofh.it> <APelX-51z-1@gated-at.bofh.it> <APfBn-5Ge-13@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Tue, Sep 15, 2020 at 09:13:04AM +0000, Suryadevara, Revanth wrote:
> 1.) Pertaining to Nginx there is no CVE-ID, main concern is, 
> According to nginx download page, (http://nginx.org/en/download.html) Nginx 1.14.x is no longer supported and will not be getting regular patches. So, if any security Vulnerabilities arise then system would be at high risk as the vendor no longer provide updates.

The Debian security team backports patches to fix security issues
whenever possible.

*If* in the future a vulnerability is discovered which cannot easily be
fixed by a patch backported from a future version of nginx, then the
security team *may* opt to use a newer upstream version of nginx in
the stable release.  There is some precedent for this with other packages
such as samba and bind9.

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 10:20 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Reco <recoverym4n@enotuniq.net> - 2020-09-15 11:40 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 11:40 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution <tomas@tuxteam.de> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Dan Ritter <dsr@randomstring.org> - 2020-09-15 15:00 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 15:40 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 15:50 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2020-09-15 16:00 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 13:40 +0200

csiph-web