118
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (thehackernews.com)
submitted 4 months ago* (last edited 4 months ago) by to c/selfhosted@lemmy.world
15 comments fedilink hide all child comments
 

Update your nginx instances

cross-posted from: https://lemmy.world/post/46851448

CVE - Common Vulnerabilities and Exposures system
RCE - Remote Code Execution
PoC - Proof of Concept

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 4 months ago* (1 child)

I have an old Debian 11 "bullseye" installation running on one of my servers. It's stuck at nginx 1.18.0, but it should theoretically still be covered by Debian 11 LTS security updates, right? https://wiki.debian.org/LTS/Using
nginx/oldoldstable-security,now 1.18.0-6.1+deb11u5

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •