Get the most out of your Centmin Mod LEMP stack
Become a Member

Security OpenSSL OpenSSL 1.1.1d Security & Bug Fix Release

Discussion in 'CentOS, Redhat & Oracle Linux News' started by eva2000, Sep 8, 2019.

  1. eva2000

    eva2000 Administrator Staff Member

    54,647
    12,230
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,799
    Local Time:
    8:01 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    For Centmin Mod 123.09beta01 users, OpenSSL 1.1.1d has been released. OpenSSL 1.1.1d for Nginx is a security and bug fix release.


    To update your Centmin Mod Nginx's OpenSSL version from 1.1.1c to 1.1.1d, run cmupdate command in SSH first
    Code (Text):
    cmupdate

    this will update your server's Centmin Mod local code in /usr/local/src/centminmod
    example cmupdate output
    Code (Text):
    cmupdate
    No local changes to save
    Updating 9cb4552..aedc549
    Fast-forward
     centmin.sh                | 8 ++++----
     example/custom_config.inc | 6 +++---
     2 files changed, 7 insertions(+), 7 deletions(-)
    

    Then run centmin.sh menu option 4 to recompile Nginx and check output for command
    Code (Text):
    nginx -V

    and see if Nginx was build with OpenSSL 1.1.1d :)
     
    Last edited: Sep 11, 2019
  2. eva2000

    eva2000 Administrator Staff Member

    54,647
    12,230
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,799
    Local Time:
    8:01 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Forthcoming OpenSSL Releases
     
  3. eva2000

    eva2000 Administrator Staff Member

    54,647
    12,230
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,799
    Local Time:
    8:01 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    OpenSSL Security Advisory

     
  4. Rake-GH

    Rake-GH Active Member

    179
    93
    28
    Jul 29, 2019
    USA
    Ratings:
    +144
    Local Time:
    5:01 PM
    default
    default
    Thank you for keeping us up to date!
     
  5. Rake-GH

    Rake-GH Active Member

    179
    93
    28
    Jul 29, 2019
    USA
    Ratings:
    +144
    Local Time:
    5:01 PM
    default
    default
    this might be 100% unrelated but 20 minutes after I upgraded, my CPU usage shot up from 3% to 60%. now it's hopping between 5% and 20%. Might be something else but I thought I would mention it
     
  6. eva2000

    eva2000 Administrator Staff Member

    54,647
    12,230
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,799
    Local Time:
    8:01 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    hard to say, only you would know your normal cpu usage around that particular time of day though
     
  7. Rake-GH

    Rake-GH Active Member

    179
    93
    28
    Jul 29, 2019
    USA
    Ratings:
    +144
    Local Time:
    5:01 PM
    default
    default
    Everything is fine now, we all are good!
     
  8. EckyBrazzz

    EckyBrazzz Active Member

    916
    189
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +362
    Local Time:
    7:01 PM
    Latest
    Latest
    Without reading this thread, I did a recompile and noticed it.
    @eva2000 absolute a winner! Just setup a cron to keep Cenmin up to date. You push out so many new things that it's hard to keep up without a cron:)

    Just want to use
    also:(
     
  9. pamamolf

    pamamolf Premium Member Premium Member

    4,084
    428
    83
    May 31, 2014
    Ratings:
    +834
    Local Time:
    12:01 AM
    Nginx-1.25.x
    MariaDB 10.3.x
    built by gcc 9.2.0 (GCC) (y)

    Me too :whistle:
     
  10. eva2000

    eva2000 Administrator Staff Member

    54,647
    12,230
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,799
    Local Time:
    8:01 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    yeah you can put cmupdate command into a cronjob to keep centmin mod code base updated frequently i.e. every 24hrs - it's what I do on my servers :)

    GCC 9.2.1 is latest I am testing with custom GCC 9 RPMs I built (these take between 30-240 minutes to build depending on server specs). For regularly Centmin Mod folks that will come whenever devtoolset-9 SCL YUM packages are available.
     
  11. pamamolf

    pamamolf Premium Member Premium Member

    4,084
    428
    83
    May 31, 2014
    Ratings:
    +834
    Local Time:
    12:01 AM
    Nginx-1.25.x
    MariaDB 10.3.x
    Ok good :)
     
  12. EckyBrazzz

    EckyBrazzz Active Member

    916
    189
    43
    Mar 28, 2018
    >>>>Click here<<<< i'm nearby......
    Ratings:
    +362
    Local Time:
    7:01 PM
    Latest
    Latest
    Last edited: Sep 15, 2019