recent nginx security issue announce
Приветствую!По поводу вчерашнего сообщения о потенциальной уязвимости вnginx[*]: мы знаем об этом анонсе и работаем над анализом проблемы.Результаты этого анализа сообщим отдельно.*...
View ArticleRe: recent nginx security issue announce
It seems that they don't know the meaning of responsible disclosure. Theyshould have given you some timebefore going public. Unfortunately there are plenty of drama queens in theIT security field.All...
View ArticleRe: Strange .ini file parsing
Same here - sometimes after restart FPM will take and parse some .ini filefrom random user homedir instead of /usr/local/etc/php.iniIt's very hard to reproduce - but that's a serious security...
View ArticleConfig file templating
Hi,I'm in the mid of converting from lighttpd to nginx. There I have onesmall config snippet for each 'subsite' (it's personal only, so lots ofdifferent unrelated stuff). Unfortunately, quite often a...
View ArticleRe: nginx не обрабатывает поддомен
Максим, спасибо за ответ. Вы оказались близки к правде. На самом деле имя subdomen2 было зарезервировано для дочернего неймсервера site.com и перенаправление происходило на уровне браузера, не доходя...
View ArticleInteger overflow in ngx_http_close_connection
Cfr. http://www.securityfocus.com/archive/1/526439/30/0/threadedIs 1.4.x release affected?Thanks,d._______________________________________________nginx mailing...
View ArticleRE: Integer overflow in ngx_http_close_connection
Hi!> Cfr. http://www.securityfocus.com/archive/1/526439/30/0/threaded>> Is 1.4.x release affected?I guess. Please see the "recent nginx security issue announce"...
View ArticleRe: Integer overflow in ngx_http_close_connection
On Apr 26, 2013, at 4:12 PM, Lukas Tribus wrote:> Hi!>>> Cfr. http://www.securityfocus.com/archive/1/526439/30/0/threaded>>>> Is 1.4.x release affected?>> I guess. Please...
View ArticleNeed help w SSL setup
Trying to get SSL setup properly. Can someone verify I'm doing this correctly? These config files work.. Below works.. but I am required to push all traffic through SSL. Would like to be able to...
View ArticleNginx as Reverse Proxy Cache of fcgi django app in separate server
Hi,I've been looking on Internet about this but seems all the examplesavailable are for a proxy conf or fcgi conf. Not both.This is my scenario: I have three servers. The first one run only nginx(and...
View ArticleRe: Trailing Slashes and Reverse Proxy
The issue is resolved now. This was not related to nginx, but the upstream apache configuration.
View Articlenginx openssl compilation problem
Hello, I'm desparately trying to compile the latest nginx with the latest OpenSSL.In short I'm grabbing the latest nginx tar.gz (1.4.0 but had the same problem with 1.3.16) and the latest OpenSSL...
View ArticleVulnerability
Is anyone looking into this one?http://packetstormsecurity.com/files/121416/nginx-Integer-Overflow.html
View Article[ANN] ngx_openresty devel version 1.2.8.1 released
Hello guys!I am excited to announce that the new development version ofngx_openresty, 1.2.8.1, is now released:http://openresty.org/#DownloadSpecial thanks go to all our contributors and users for...
View Article[PATCH] use signed value when comparing timer with 0 and check lingering_time...
In ngx_http_lingering_close_handlerand ngx_http_discarded_request_body_handler, there's riskthat r->lingering_time is smaller than ngx_time(), then comparing timerwhich is a unsigned value with zero...
View ArticleSimple forward proxy
Hello,I have nginx 1.3 on my ubuntu 10.04 and there are some websites running by it. I'd like to setup a forward proxy on a specific port so that I could use it on my browsers network options.I've done...
View ArticleRe: Nginx cli
netstat -anp | grep -c nginxor to be more specificnetstat -anp | grep ":80" | grep -c nginx
View ArticleRe: Nginx as Reverse Proxy Cache of fcgi django app in separate server
On Fri, Apr 26, 2013 at 12:40:06PM -0600, Alvaro Mantilla Gimenez wrote:Hi there,> I've been looking on Internet about this but seems all the examples> available are for a proxy conf or fcgi...
View ArticleRe: Simple forward proxy
On Sat, Apr 27, 2013 at 04:19:05AM -0400, asmith wrote:Hi there,> I have nginx 1.3 on my ubuntu 10.04 and there are some websites running by> it. I'd like to setup a forward proxy on a specific...
View Article