Vulnerability related Doubts in Nginx

Maxim Konovalov maxim at nginx.com
Tue Mar 22 12:13:57 UTC 2016


Hi Zeal,

On 3/22/16 3:05 PM, Zeal Vora wrote:
> Hi
> 
> We are running Nginx version 1.8 ( nginx-1.8.1-1.amzn1.ngx.x86_64 )
> in our servers. So in the Vulnerability Assessment, Nessus gave
> report that it is vulnerable.
> 
> *Current version :-*        nginx-1.8.1-1.amzn1.ngx.x86_64
> 
> *Fix Version ( According to Nessus ) :-*   nginx-1.8.1-1.26.amzn1 
> 
> I don't seem to find the " Fix Version " of Nginx which Nessus
> suggested. 
> 
> Is there any work around for this ?
> 
> Is 1.8 the latest stable version which is available or we can move
> forward with higher one ?
> 
> 
> Any help will be appreciated!
> 
Does it help?

https://alas.aws.amazon.com/ALAS-2016-655.html

-- 
Maxim Konovalov



More information about the nginx mailing list