Nginx PageSpeed ngx_pagespeed 1.9.32.13 beta security update !

ngx_pagespeed 1.9.32.13-beta security fix update has been released. Read below for instructions for updating your Centmin Mod Nginx's ngx_pagespeed module integration.

How to Update ngx_pagespeed

Best way is to also keep your Centmin Mod code updated as outlined at Upgrade Centmin Mod - CentminMod.com LEMP Nginx web stack for CentOS via centmin.sh menu option 23 if possible then you won't need to play with changing version numbers if I already updated the code for the new versions. However, if I have not updated the versions, you can do that yourself using instructions below.

To update, add these variables to to persistent config at /etc/centminmod/custom_config.inc (create it if it doesn't exist)

Code (Text):

NGXPGSPEED_VER='1.9.32.13-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.13'

or edit centmin.sh and prior to recompiling nginx via centmin.sh menu option 4

change variables

from

Code (Text):

NGXPGSPEED_VER='1.9.32.11-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.11'

to

Code (Text):

NGXPGSPEED_VER='1.9.32.13-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.13'

then recompile nginx via centmin.sh menu option 4

Quick sed replacement, update commands for existing Centmin Mod are outlined on official page here and below.

change to centmin mod install directory, sed replace the version numbers and grep to make sure they were replaced

Code (Text):

cmdir
sed -i 's|1.9.32.11|1.9.32.13|g' centmin.sh
grep 1.9.32 centmin.sh

i.e.

Code (Text):

grep 1.9.32 centmin.sh
NGXPGSPEED_VER='1.9.32.13-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.13'

then run centmin.sh menu option 4 to recompile Nginx with new version.

check that ngx_pagespeed-release-1.9.32.13-beta was compiled via nginx -V command

ngx_pagespeed 1.9.32.13-beta security update

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to ngx_pagespeed 1.9.32.13-beta for security update. You can update Centmin Mod code via centmin.sh menu option 23 submenu option 1 and then 2 and then recompile Nginx via centmin.sh menu option 4 as outlined above.

Discussion thread at Nginx PageSpeed - ngx_pagespeed 1.9.32.13 beta security update ! | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

more info at January 2016 PageSpeed Security Update.  |  PageSpeed Module  |  Google Developers

 

Disable ngx_pagespeed integration

If you do not use ngx_pagespeed and have not enabled it as per instructions outlined at centminmod.com/nginx_ngx_pagespeed.html, you can in fact totally remove ngx_pagespeed integration from Nginx server using steps outlined on official site Nginx PageSpeed - CentminMod.com LEMP Nginx web stack for CentOS and below:

The best way is to use persistent config file created or appended to at /etc/centminmod/custom_config.inc and add setting:

Code:

NGINX_PAGESPEED=n

Then run centmin.sh menu option 4 to recompile Nginx without ngx_pagespeed module integration.

 

ngx_pagespeed 1.10 branch also got the same security fix in 1.10.33.4 but 1.10 branch only works with Centmin Mod 123.09beta01 and not 123.08stable. So stick with 1.9.32.13 for Centmin Mod 123.08stable https://community.centminmod.com/posts/25764/

 

yes but then if you don't use ngx_pagespeed you can totally disable and remove the integration https://community.centminmod.com/posts/25771/

nice

 

On centmin mod 123.08stable or 123.09beta01 ? ngx_pagespeed 1.10 only works on 123.09beta01 right now. It's what this forum and centminmod.com VPS clusters are on (123.09beta01 + ngxPagespeed 1.10 branch).

Actually, been thinking about it according to Centmin Mod 2106 survey Centmin Mod Survey 2016 ~45% of users are not actively using ngx_pagespeed with it enabled so wondering if disabling ngx_pagespeed integration out of box is better. And let folks enable integration if they want it as per instructions outlined at centminmod.com/nginx_ngx_pagespeed.html

 

yeah might want to read up on ngx_pagespeed 1.10 branch changes and tweaks at Nginx PageSpeed - Nginx Pagespeed 1.10.x betas coming | Centmin Mod Community whenever you have the time..

 

yes it's outlined in Centmin Mod upgrade guide page under the section for persistent configuration settings Upgrade Centmin Mod - CentminMod.com LEMP Nginx web stack for CentOS

 

exactly what persistent config file /etc/centminmod/custom_config.inc is for