cryptofuture/nginx-hda-bundle

this nginx version is outdated and dangerous. Got DoS attacked!

Closed this issue · 4 comments

This nginx version is not up to date.
We got DoS attacked today by this http/2 issue https://news.softpedia.com/news/nginx-security-issues-expose-more-than-14-million-servers-to-dos-attacks-523659.shtml

I really loved your modularity approach but this all means nothing when we can get attacked. Really sad I loose brotli and Google pagespeed for my old sites now :(

Seems the only good way to keep nginx with features is to compile it yourself (I hate this route ... I want to install stuff not custom compile it).

I had some issues, but hope it would be updated soon. Unfortunately my last attempts (about 8 month ago) to do updates automatic with script failed, since modules need manual patching too freq.

Help with update is welcome: #28

Closed in cae5a1f

amazing @cryptofuture thanks a lot!