teamhephy / router

MIT License
4 stars 10 forks source link

chore(nginx): upgrading nginx to latest stable release v1.16.1 #40

Closed pdomagala closed 5 years ago

pdomagala commented 5 years ago

Current version is outdated and not supported. It's fully compatible with nginx-module-vts.

Tested and works as well.

Cryptophobia commented 5 years ago

@felixbuenemann , is it safe to do this upgrade without breaking anything?

felixbuenemann commented 5 years ago

@Cryptophobia Looks like your requested changes to the commit message have been applied.

felixbuenemann commented 5 years ago

This update should be fairly high priority, since it fixes CVE-2019-9511, CVE-2019-9513, CVE-2019-9516 for users that have HTTP/2 enabled, see:

http://nginx.org/en/security_advisories.html

Cryptophobia commented 5 years ago

@felixbuenemann Sounds good! Thank you for fixing the commit message @pdomagala . It's hard to keep current with all of the CVE vulnerabilities. I will prioritize this for the next release.