Re: nginx-1.21.5

2021-12-30 Thread George
Maxim Dounin Wrote: --- > Hello! > > On Wed, Dec 29, 2021 at 11:30:04PM -0500, George wrote: > > > Thanks for PCRE2 support! > > > > From what I read Nginx 1.21.5 will default to PCRE2 if found or > fallback to > > PCRE if not > > > > You can

Re: Help request about Log4j attack attempts and NGINX logs meaning

2021-12-30 Thread lists
This is the list of effected programs. https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md   Original Message   From: ma...@nginx.com Sent: December 29, 2021 11:21 PM To: mauro.trid...@cmcc.it Reply-to: nginx@nginx.org Cc: nginx@nginx.org Subject: Re: Help

Re: Help request about Log4j attack attempts and NGINX logs meaning

2021-12-30 Thread Mauro Tridici
Hello Maxim, Thank you for your reply. This is the information that I need :) Mauro > On 30 Dec 2021, at 08:20, Maxim Konovalov wrote: > > Mauro, > > Unless you use somewhere in your stack log4j vulnerable software (nginx is > not) I don't see anything significant to worry about. > > Maxim

Re: nginx-1.21.5

2021-12-30 Thread Maxim Dounin
Hello! On Wed, Dec 29, 2021 at 11:30:04PM -0500, George wrote: > Thanks for PCRE2 support! > > From what I read Nginx 1.21.5 will default to PCRE2 if found or fallback to > PCRE if not > > You can disable PCRE2 default by passing --without-pcre2 flag - which works > fine and > > ldd $(which ng