Nginx PageSpeed ngx_pagespeed Security releases 1.9.32.14 and 1.10.33.7

ngx_pagespeed 1.9.32.14 and 1.10.33.7 security fixed updates (and 1.11.33.0) has been released. Read below for instructions for updating your Centmin Mod Nginx's ngx_pagespeed module integration.

Summary

Basic summary is you have 2 options going forth:

1. You actively use ngx_pagespeed and require updating ngx_pagespeed - then you update or switch to Centmin Mod 123.09beta01 branch as 123.08stable doesn't support ngx_pagespeed 1.10+ branch. Once you switch to 123.09beta01 branch confirm centmin.sh has 1.11.33.0 listed for Nginx Pagespeed variables with command
   Code (Text):

   grep 1.11.33 /usr/local/src/centminmod/centmin.sh
   

   or
   
   Code (Text):

   grep 1.10.33 /usr/local/src/centminmod/centmin.sh
   

   
   and if it doesn't report 1.11.33.0+ or 1.10.33.7 versions, use centmin.sh menu option 23 submenu option 2 to update your 123.09beta01 code. Then set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:
   Code (Text):

   NGINX_PAGESPEED=y

   and then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4. Centmin Mod 123.09beta01 change log is here.
2. You do not use ngx_pagespeed and want to disable it - then you update to latest Centmin Mod 123.09beta01 branch or update to 123.08stable code via centmin.sh menu option 23 and just then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4 (which already has NGINX_PAGESPEED=n set out of box)

Announcement

From Google Groups

How to Update ngx_pagespeed

Best way is to also keep your Centmin Mod code updated as outlined at Upgrade Centmin Mod - CentminMod.com LEMP Nginx web stack for CentOS via centmin.sh menu option 23 if possible then you won't need to play with changing version numbers if I already updated the code for the new versions. However, if I have not updated the versions, you can do that yourself using instructions below.

Both 123.08stable and 123.09beta01 now disable ngx_pagespeed by default, to enable set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:

Code (Text):

NGINX_PAGESPEED=y

and then recompile Nginx 1.9.13 via centmin.sh menu option 4

For 123.08stable and nginx versions 1.9.10 and below. Note that 123.08stable ngx_pagespeed support is disabled by default for newer installs due to Nginx 1.9.11+ compatibility issues and ngx_pagespeed 1.10 branch is not supported in 123.08stable, so please update to Centmin Mod 123.09beta01 and ngx_pagespeed 1.10 branch

Code (Text):

NGXPGSPEED_VER='1.9.32.14-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.14'

For 123.09beta01

Code (Text):

NGXPGSPEED_VER='1.10.33.7-beta'
NGINX_PAGESPEEDPSOL_VER='1.10.33.7'

or edit centmin.sh and prior to recompiling nginx via centmin.sh menu option 4

For 123.08stable and nginx versions 1.9.10 and below, change variables

from

Code (Text):

NGXPGSPEED_VER='1.9.32.13-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.13'

to

Code (Text):

NGXPGSPEED_VER='1.9.32.14-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.14'

For 123.09beta01 and nginx versions 1.9.11+ and higher, change variables

from

Code (Text):

NGXPGSPEED_VER='1.10.33.6-beta'
NGINX_PAGESPEEDPSOL_VER='1.10.33.6'

to

Code (Text):

NGXPGSPEED_VER='1.10.33.7-beta'
NGINX_PAGESPEEDPSOL_VER='1.10.33.7'

then recompile nginx via centmin.sh menu option 4 with Nginx version 1.9.13 if using Centmin Mod 123.09beta01

Quick sed replacement, update commands for existing Centmin Mod are outlined on official page here and below.

change to centmin mod install directory, sed replace the version numbers and grep to make sure they were replaced

Code (Text):

cmdir
sed -i 's|1.10.33.6|1.10.33.7|g' centmin.sh
grep 1.10.33 centmin.sh

i.e.

Code (Text):

grep 1.10.33 centmin.sh
NGXPGSPEED_VER='1.10.33.7-beta'
NGINX_PAGESPEEDPSOL_VER='1.10.33.7'

then run centmin.sh menu option 4 to recompile Nginx with new version.
or

Code (Text):

cmdir
sed -i 's|1.9.32.13|1.9.32.14|g' centmin.sh
grep 1.9.32 centmin.sh

i.e.

Code (Text):

grep 1.9.32 centmin.sh
NGXPGSPEED_VER='1.9.32.14-beta'
NGINX_PAGESPEEDPSOL_VER='1.9.32.14'

then run centmin.sh menu option 4 to recompile Nginx with new version.

check that ngx_pagespeed updated version was compiled via nginx -V command

---

 

I would update your Centmin Mod 123.08stable and 123.09beta01 code first. If you're on 123.08stable, it would be a good time to switch to 123.09beta01 branch via centmin.sh menu option 23 as ngx_pagespeed 1.10 branch is not supported by 123.08stable.

If you use ngx_pagespeed, then once on 123.09beta01, set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:

Code (Text):

NGINX_PAGESPEED=y

and then recompile Nginx 1.9.13 via centmin.sh menu option 4

If you do not use ngx_pagespeed don't set NGINX_PAGESPEED=y, just then recompile Nginx 1.9.13 via centmin.sh menu option 4 and ngx_pagespeed will default to NGINX_PAGESPEED=n and be disabled.

Upgrading Centmin Mod Code to Latest Version

Getting Started Guide step 19 outlines also how to keep Centmin Mod code updated or how to switch version branches.

Centmin Mod LEMP stack's script code is constantly updated for improvements, bug fixes and security fixes so keeping the Centmin Mod code up to date is important. With Centmin Mod 1.2.3-eva2000.08) (123.08stable) and higher releases, a newly added centmin.sh menu option 23 allows much easier code updates and version branch swicthing via Git backed environment you can setup. For full details read the following links:

• New centmin.sh menu option 23 updating
• Centmin Mod Upgrades
• Cronjob Auto Updating Centmin Mod Code Guide

Upgrading Centmin Mod involves 2 parts.

1. Upgrading the actual Centmin Mod code outlined at Upgrade Centmin Mod. This is heart of Centmin Mod where the code is the engine that runs centmin.sh shell based menu and all the automation you're accustomed to. You can easily update within a Centmin Mod version branch or switch version branches via centmin.sh menu option 23 outlined here.
2. Upgrade software that Centmin Mod installed or manages. For this part following outline at How to upgrade Centmin Mod software installed on your server.

 

Basic summary is you have 2 options going forth:

1. You actively use ngx_pagespeed and require updating ngx_pagespeed - then you update or switch to Centmin Mod 123.09beta01 branch as 123.08stable doesn't support ngx_pagespeed 1.10 branch. Once you switch to 123.09beta01 branch, set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:
   Code (Text):

   NGINX_PAGESPEED=y

   and then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4. Centmin Mod 123.09beta01 change log is here.
2. You do not use ngx_pagespeed and want to disable it - then you update to latest Centmin Mod 123.09beta01 branch or update to 123.08stable code via centmin.sh menu option 23 and just then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4 (which already has NGINX_PAGESPEED=n set out of box)

Switching to 123.09beta01 branch

Switching to 123.09beta01 branch is easy via centmin.sh menu option 23 submenu option 1 first then submenu option 3

 

You should still update 123.08stable code via centmin.sh menu option 23 submenu option 2 as there may have been other updates over past few months you missed. But don't need to do anything else as after updating, the latest 123.08stable already has NGINX_PAGESPEED=n set out of box.

 

Seems ngx_pagespeed 1.11.33.0 was just released too Beta Branch - ngx_pagespeed 1.11.33.0 beta | Centmin Mod Community so Centmin Mod 123.09beta01 was updated to that version by default. Same method of update as outlined here and in this post below.

ngx_pagespeed 1.11.33.0

• PageSpeed Release Notes | PageSpeed Module | Google Developers
• Google Groups

Summary

Basic summary is you have 2 options going forth:

1. You actively use ngx_pagespeed and require updating ngx_pagespeed - then you update or switch to Centmin Mod 123.09beta01 branch as 123.08stable doesn't support ngx_pagespeed 1.10+ branch. Once you switch to 123.09beta01 branch confirm centmin.sh has 1.11.33.0 listed for Nginx Pagespeed variables with command
   Code (Text):

   grep 1.11.33 /usr/local/src/centminmod/centmin.sh
   

   and if it doesn't report 1.11.33 versions, use centmin.sh menu option 23 submenu option 2 to update your 123.09beta01 code. Then set in /etc/centminmod/custom_config.inc persistent config file you create or already created and set:
   Code (Text):

   NGINX_PAGESPEED=y

   and then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4. Centmin Mod 123.09beta01 change log is here.
2. You do not use ngx_pagespeed and want to disable it - then you update to latest Centmin Mod 123.09beta01 branch or update to 123.08stable code via centmin.sh menu option 23 and just then recompile lastest Nginx version 1.9.13 via centmin.sh menu option 4 (which already has NGINX_PAGESPEED=n set out of box)