Categories
Nginx

Security : Nginx 1.4.1

Nginx 1.4.1 has been released on May 7th 2013, with the fix for the stack-based buffer overflow security problem in nginx 1.3.9 – 1.4.0, discovered by Greg MacManus, of iSIGHT Partners Labs (CVE-2013-2028).

As a consequence, Dotdeb’s packages of Nginx 1.4.1 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386).

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx

Nginx 1.4.0, for Wheezy and Squeeze

Nginx 1.4.0 stable version has been released on April 24th 2013, incorporating many new features developed in the 1.3.x branch :

As a consequence, Dotdeb’s packages of Nginx 1.4.0 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

  • (Wheezy only) SPDY support has been enabled in nginx-extras and nginx-full.
  • (Wheezy only) the nginx-passenger flavor has been removed. You should use unicorn or uwsgi-plugin-rack-ruby* instead.
  • nginx-extras now supports HTTP Gunzip.
  • Naxsi has been upgraded to 0.50.
  • chunkin-nginx-module (useless now) and nginx-upload-module (incompatible with 3.1.8+) are no longer supported.
  • The headers-more, echo, lua, Push stream, Pinba and Passenger modules got minor upgrades.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx

Nginx 1.2.8

Nginx 1.2.8 has been released with 4 bugfixes. See the full Changelog for more details.

As a consequence, Dotdeb’s packages of Nginx 1.2.8 are now available for Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

  • The config of the default vhost is now ok by default (see [Edit]).
  • The X-rid header module has been added to all the Nginx flavors.
  • The chunkin-nginx-module, headers-more-nginx-module, nginx-cache-purge, nginx-echo, nginx-lua, nginx-push-stream-module and ngx_http_substitution_filter_module modules have been updated.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

[Edit] A minor update (1.2.8-1~dotdeb.2) has been published :

  • it now displays errors at startup, if any
  • the ipv6only typo has been fixed, the default vhost now works perfectly.
Categories
Nginx

Nginx 1.2.7

Today, Nginx 1.2.7 has been released with a few new features but also bugfixes merged from 1.3.x. See the full Changelog for more details.

As a consequence, Dotdeb’s packages of Nginx 1.2.7 are now available for Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

  • Logs are now rotated on a weekly basis.
  • Passenger has been upgraded to the 3.0.19 version.
  • The chunkin-nginx-module, nginx-lua and nginx-upload-module modules got minor updates.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx

Nginx 1.2.6

Dotdeb’s packages of Nginx 1.2.6 are now available for Debian 6.0 “Squeeze” (amd64/i386) with the following changes (see the Changelog) :

  • Feature: the $request_time and $msec variables can now be used not only in the “log_format” directive.
  • Bugfix: cache manager and cache loader processes might not be able to start if more than 512 listen sockets were used.
  • Bugfix: in the ngx_http_dav_module.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx Passenger

Nginx 1.2.5, Passenger 3.0.18

Dotdeb’s packages of Nginx 1.2.5 are now available for Debian 6.0 “Squeeze” (amd64/i386).

On the Nginx side, it fixes some minor bugs and bring new minor features. Please take a look at Nginx’ official Changelog before upgrading.

On the Dotdeb side :

  • the Pinba module has been added to nginx-full, nginx-passenger and nginx-extras
  • the HTTP substitution filter module (v0.6.2-6aa992a2) has been added to nginx-full, nginx-passenger and nginx-extras
  • chunkin-nginx-module has been upgraded to 0.23rc2-3-e57a7ab9
  • headers-more-nginx-module has been upgraded to v0.18-179f39b1
  • nginx-development-kit has been upgraded to v0.2.17-7-f92d6c6a
  • nginx-echo has been upgraded to v0.41-b1e519fe
  • nginx-lua has been upgraded to v0.7.4-35d963f1
  • nginx-push-stream-module has been upgraded to v0.3.4-68651290
  • Passenger has been upgraded to the 3.0.18 version

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx Passenger

Nginx 1.2.4

Dotdeb’s packages of Nginx 1.2.4 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix some minor bugs, please take a look at Nginx’ official Changelog before upgrading.

Please also note that Passenger has been upgraded to the 3.0.17 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx

Nginx 1.2.3

Dotdeb’s packages of Nginx 1.2.3 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix 5 bugs, please take a look at Nginx’ official Changelog before upgrading.

Please also note that :

  • Naxsi has been upgraded to the 0.48 version, and the new nginx-naxsi-ui package provides the autolearning daemon and the web user interface.
  • Nginx Lua has been upgraded to the 0.5.8 version.
  • Passenger has been upgraded to the 3.0.14 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx

Nginx 1.2.2

Dotdeb’s packages of Nginx 1.2.2 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix 11 bugs, enhance IPv6, and introduce weighted ip_hash and least_conn load-balancing to upstream servers. Please take a look at Nginx’ official Changelog before upgrading.

Please also note that :

  • Naxsi has been upgraded to the 0.47 version, and the new nginx-naxsi-ui package provides the autolearning daemon and the web user interface.
  • Nginx Cache Purge has been upgraded to the 1.6 version.
  • Passenger has been upgraded to the 3.0.13 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Categories
Nginx

Nginx 1.2.1

Dotdeb’s packages of Nginx 1.2.1 are now available for Debian 6.0 “Squeeze” (amd64/i386). They fix some bugs and enhance the IPv6 support. Please take a look at Nginx’ official Changelog before upgrading.

Please also note that Naxsi has been upgraded to the 0.46-1 version.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.