NGINX 1.0.14 Stable Released – Memory Disclosure

15 Mar 2012

NGINX 1.0.14 was released on 15 March 2012 for both Windows and Linux. The binary is now available in the NGINX repository and direct download from Nginx.com. This stable release corrects a bug that enabled a malformed response from an upstream server to return the contents of previously freed memory to a client.

Download link: http://nginx.org/en/download.html

Hybrid Global Inc. runs Nginx on Centos and Red Hat. When starting out we recommend manually adding the NGINX repo to the list of yum repositories.

With your favorite editor such VIM, VI, emacs or good old nano create a file named:

1 /etc/yum.repos.d/nginx.repo

Add the following details to this file:

1 [nginx]
2 name=nginx repo
3 baseurl=<a href="http://nginx.org/packages/OS/OSRELEASE/" target="_blank">http://nginx.org/packages/OS/OSRELEASE/</a>$basearch/
4 gpgcheck=0
5 enabled=1

To install NGINX run:

1 yum install nginx

- Chad Smith