Learn about Centmin Mod LEMP Stack today
Become a Member

Security Centmin Mod ngx_pagespeed security fixed versions released

Discussion in 'Centmin Mod News' started by eva2000, Mar 31, 2016.

Thread Status:
Not open for further replies.
  1. eva2000

    eva2000 Administrator Staff Member

    55,381
    12,255
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,835
    Local Time:
    12:15 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    If you have Centmin Mod Nginx with ngx_pagespeed compiled, you need to update to latest Centmin Mod code and recompile Nginx via centmin.sh menu option 4. Full details and update instructions outlined at Nginx PageSpeed - ngx_pagespeed Security releases 1.9.32.14 and 1.10.33.7 | Centmin Mod Community


    Summary



    Basic summary is you have 2 options going forth:
    1. You actively use ngx_pagespeed and require updating ngx_pagespeed - then you update or switch to Centmin Mod 123.09beta01 branch as 123.08stable doesn't support ngx_pagespeed 1.10+ branch. Once you switch to 123.09beta01 branch confirm centmin.sh has 1.11.33.0 listed for Nginx Pagespeed variables with command
      Code (Text):
      grep 1.11.33 /usr/local/src/centminmod/centmin.sh
      
      or
      Code (Text):
      grep 1.10.33 /usr/local/src/centminmod/centmin.sh
      

      and if it doesn't report 1.11.33.0+ or 1.10.33.7 versions, use centmin.sh menu option 23 submenu option 2 to update your 123.09beta01 code. Then set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:
      Code (Text):
      NGINX_PAGESPEED=y
      and then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4. Centmin Mod 123.09beta01 change log is here.
    2. You do not use ngx_pagespeed and want to disable it - then you update to latest Centmin Mod 123.09beta01 branch or update to 123.08stable code via centmin.sh menu option 23 and just then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4 (which already has NGINX_PAGESPEED=n set out of box)
     
    Last edited: Apr 2, 2016
  2. eva2000

    eva2000 Administrator Staff Member

    55,381
    12,255
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,835
    Local Time:
    12:15 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+

    Upgrading Centmin Mod Code to Latest Version



    Getting Started Guide step 19 outlines also how to keep Centmin Mod code updated or how to switch version branches.

    Centmin Mod LEMP stack's script code is constantly updated for improvements, bug fixes and security fixes so keeping the Centmin Mod code up to date is important. With Centmin Mod 1.2.3-eva2000.08) (123.08stable) and higher releases, a newly added centmin.sh menu option 23 allows much easier code updates and version branch swicthing via Git backed environment you can setup. For full details read the following links:
    Upgrading Centmin Mod involves 2 parts.
    1. Upgrading the actual Centmin Mod code outlined at Upgrade Centmin Mod. This is heart of Centmin Mod where the code is the engine that runs centmin.sh shell based menu and all the automation you're accustomed to. You can easily update within a Centmin Mod version branch or switch version branches via centmin.sh menu option 23 outlined here.
    2. Upgrade software that Centmin Mod installed or manages. For this part following outline at How to upgrade Centmin Mod software installed on your server.
    So essentially, you can upgrade from .07 to .08 in place, but not everything is upgraded as some things like server initial environment setup isn't changed i.e. how swap, tmp setup and allocation are created etc. The main parts from part 2 above are what in place upgrades do i.e. Nginx and PHP-FPM compilation and config/settings parameters and MariaDB version from 5.5 to 10.0.x. If you want the full environment changed including tmp and swap setup to .08's configuration, then you would need a fresh OS install and fresh .08 initial install. You can think of it like upgrading Windows 7 to Windows 8. An in place upgrade will upgrade code but won't change your computer environment from when you installed Windows 7 i.e. disk configuration and partition sizes won't change from when you initially installed Windows 7. Only way to change that would be fresh Windows 8 install.
     
  3. eva2000

    eva2000 Administrator Staff Member

    55,381
    12,255
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,835
    Local Time:
    12:15 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
Thread Status:
Not open for further replies.