[Pkg-nginx-maintainers] Security Vulnerability with nginx v1.14.2 (Debian 10)

[Suryadevara, Revanth]

Hi,

We have a system running on Debian 10 with nginx v1.14.2 installed along with some other packages.

THREAT:
According to nginx download page, (http://nginx.org/en/download.html) Nginx 1.14.x is no longer supported and will not be getting regular patches

IMPACT:
The system is at high risk of being exposed to security vulnerabilities because the vendor no longer provides updates.

SOLUTION:
Upgrading to latest version of NGINX would resolve this Vulnerability.


When can we expect latest version of Nginx to be available in Debian 10 ?


Thanks,
Revanth.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/attachments/20200915/143b79e9/attachment.html>