Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #227002

Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution

Show all headers | View raw

Hi Revanth,

Suryadevara, Revanth wrote:
> Hi  Klaus,
> 
> Just needed to re-confirm couple of things here
> 
> 1. I understand that the NGINX version shipped by default is secured and will be updated with patches should there be some security issues. But my question is, Can we expect the latest version of NGINX(i.e. v1.18.x) to be available in Debian 10, soon ? If yes, when ?

As others said, and I explained already: no.

Debian 10's version of a package will never change. No new features, no
loss of features, no new syntax of configurations, no other changes.

> 2.  Please provide some kind of confirmation on CVE-2020-11879
> 	If Vulnerability was already addressed, please point me to some article which confirms the same.
> 	If not addressed, please confirm on when can we expect 3.35.91 or greater version to be available in Debian 	10?

No: no new version.

If you're unhappy with that, think about these choices:

- install upcoming Debian 11 (Testing, Bullseye) and live with the changes
  of packages and possible errors in the system. Release date unknown.

- install Debian Sid (Unstable) and live with many more changes

- if both are not fullfilling your needs, think about a different
  distribution: LFS (Linux from Scratch), or Yocto, or commerical one.

  But beware of the security updates. AFAIK both, LFS and Yocto, needs
  your effort to keep your machine(s) secure.

Best regards,
	Klaus.
-- 
Klaus Singvogel
GnuPG-Key-ID: 1024R/5068792D  1994-06-27

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 10:20 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Reco <recoverym4n@enotuniq.net> - 2020-09-15 11:40 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 11:40 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution <tomas@tuxteam.de> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Dan Ritter <dsr@randomstring.org> - 2020-09-15 15:00 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 15:40 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 15:50 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2020-09-15 16:00 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 13:40 +0200

csiph-web