Nginx PageSpeed ngx_pagespeed 1.11.33.2-beta security release

ngx_pagespeed 1.11.33.2-beta security fixed update has been released. Read below for instructions for updating your Centmin Mod Nginx's ngx_pagespeed module integration. Latest centmin mod 123.08stable and 123.09beta01 by default now disable ngx_pagespeed module and remove it's integration out of the box unless you specifically enable it in 123.09beta01 builds via
NGINX_PAGESPEED=y. The centmin mod 123.09beta01 is only branch that now supports ngx_pagespeed 1.11 branch versions so if you need to enable ngx_pagespeed 1.11, you need to switch and upgrade to latest 123.09beta01 beta via centmin.sh menu option 23 sub menu option 2 or 3.

Summary

Basic summary is you have 2 options going forth:

Option 1

---

You actively use ngx_pagespeed and require updating ngx_pagespeed - then you update or switch to Centmin Mod 123.09beta01 branch as 123.08stable doesn't support ngx_pagespeed 1.10+ branch. Once you switch to 123.09beta01 branch confirm centmin.sh has 1.11.33.2 listed for Nginx Pagespeed variables with command

Code (Text):

grep 1.11.33 /usr/local/src/centminmod/centmin.sh

or

Code (Text):

grep 1.11.33 /usr/local/src/centminmod/centmin.sh

and if it doesn't report 1.11.33.2+ versions, use centmin.sh menu option 23 submenu option 2 to update your 123.09beta01 code. Then set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:

Code (Text):

NGINX_PAGESPEED=y

and then recompile lastest Nginx version 1.9.15 via centmin.sh menu option 4. Centmin Mod 123.09beta01 change log is here.

Option 2

You do not use ngx_pagespeed and want to disable it - then you update to latest Centmin Mod 123.09beta01 branch or update to 123.08stable code via centmin.sh menu option 23 and just then recompile lastest Nginx version 1.9.15 via centmin.sh menu option 4 (which already has NGINX_PAGESPEED=n set out of box)

Announcement

From Google Groups

How to Update ngx_pagespeed

Best way is to also keep your Centmin Mod code updated as outlined at Upgrade Centmin Mod - CentminMod.com LEMP Nginx web stack for CentOS via centmin.sh menu option 23 if possible then you won't need to play with changing version numbers if I already updated the code for the new versions. However, if I have not updated the versions, you can do that yourself using instructions below.

Both 123.08stable and 123.09beta01 now disable ngx_pagespeed by default, to enable set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:

Code (Text):

NGINX_PAGESPEED=y

and then recompile Nginx 1.9.15 via centmin.sh menu option 4

For 123.08stable and nginx versions 1.9.10 and below. Note that 123.08stable ngx_pagespeed support is disabled by default for newer installs due to Nginx 1.9.11+ compatibility issues and ngx_pagespeed 1.10+ or 1.11+ branch is not supported in 123.08stable, so please update to Centmin Mod 123.09beta01 and ngx_pagespeed 1.11 branch

For 123.09beta01

Code (Text):

NGXPGSPEED_VER='1.11.33.2-beta'
NGINX_PAGESPEEDPSOL_VER='1.11.33.2'

or edit centmin.sh and prior to recompiling nginx via centmin.sh menu option 4

For 123.08stable and nginx versions 1.9.10 and below, update to 123.09beta01 first

For 123.09beta01 and nginx versions 1.9.11+ and higher, change variables

to

Code (Text):

NGXPGSPEED_VER='1.11.33.2-beta'
NGINX_PAGESPEEDPSOL_VER='1.11.33.2'

then recompile nginx via centmin.sh menu option 4 with Nginx version 1.9.15 if using Centmin Mod 123.09beta01

Quick sed replacement, update commands for existing Centmin Mod are outlined on official page here and below.

change to centmin mod install directory, sed replace the version numbers and grep to make sure they were replaced

Code (Text):

cmdir
sed -i 's|1.11.33.1|1.11.33.2|g' centmin.sh
grep 1.11.33 centmin.sh

i.e.

Code (Text):

grep 1.11.33 centmin.sh
NGXPGSPEED_VER='1.11.33.2-beta'
NGINX_PAGESPEEDPSOL_VER='1.11.33.2'

then run centmin.sh menu option 4 to recompile Nginx with new version.

check that ngx_pagespeed updated version was compiled via nginx -V command

 

I would update your Centmin Mod 123.08stable and 123.09beta01 code first. If you're on 123.08stable, it would be a good time to switch to 123.09beta01 branch via centmin.sh menu option 23 as ngx_pagespeed 1.10 and 1.11 branches are not supported by 123.08stable.

If you use ngx_pagespeed, then once on 123.09beta01, set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:

Code (Text):

NGINX_PAGESPEED=y

and then recompile Nginx 1.9.15 via centmin.sh menu option 4

If you do not use ngx_pagespeed don't set NGINX_PAGESPEED=y, just then recompile Nginx 1.9.15 via centmin.sh menu option 4 and ngx_pagespeed will default to NGINX_PAGESPEED=n and be disabled.

Upgrading Centmin Mod Code to Latest Version

Getting Started Guide step 19 outlines also how to keep Centmin Mod code updated or how to switch version branches.

Centmin Mod LEMP stack's script code is constantly updated for improvements, bug fixes and security fixes so keeping the Centmin Mod code up to date is important. With Centmin Mod 1.2.3-eva2000.08) (123.08stable) and higher releases, a newly added centmin.sh menu option 23 allows much easier code updates and version branch swicthing via Git backed environment you can setup. For full details read the following links:

• New centmin.sh menu option 23 updating
• Centmin Mod Upgrades
• Cronjob Auto Updating Centmin Mod Code Guide

Upgrading Centmin Mod involves 2 parts.

1. Upgrading the actual Centmin Mod code outlined at Upgrade Centmin Mod. This is heart of Centmin Mod where the code is the engine that runs centmin.sh shell based menu and all the automation you're accustomed to. You can easily update within a Centmin Mod version branch or switch version branches via centmin.sh menu option 23 outlined here.
2. Upgrade software that Centmin Mod installed or manages. For this part following outline at How to upgrade Centmin Mod software installed on your server.

 

Switching to 123.09beta01 branch

Switching to 123.09beta01 branch is easy via centmin.sh menu option 23 submenu option 1 first then submenu option
3

 

123.09beta01 nginx 1.9.15 with /etc/centminmod/custom_config.inc persistent config file you create or already created and variable set to actively enable and integrate ngx_pagespeed module:

Code (Text):

NGINX_PAGESPEED=y

look for --add-dynamic-module=../ngx_pagespeed-release-1.11.33.2-beta in nginx -V output