118
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (thehackernews.com)
submitted 4 months ago* (last edited 4 months ago) by to c/selfhosted@lemmy.world
15 comments fedilink hide all child comments
 

Update your nginx instances

cross-posted from: https://lemmy.world/post/46851448

CVE - Common Vulnerabilities and Exposures system
RCE - Remote Code Execution
PoC - Proof of Concept

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 4 months ago

For anyone else using SWAG, it looks like a fix is on its way but not available yet. This SWAG issue points to an upstream Alpine package dependency that needs to be updated first. Looking at the source, they just recently committed backported patches, so presumably a new version will be released soon; then the SWAG image can be updated.

  • permalink
  • fedilink
  • source
    •