[SAC] [OSGeo] #2659: Upgrade nginx proxy servers on osgeo3, osgeo4, osgeo7 to Ubuntu 20.04, nginx 1.17+

Committees SAC mailing list
1

#2659: Upgrade nginx proxy servers on osgeo3, osgeo4, osgeo7 to Ubuntu 20.04,
nginx 1.17+
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Keywords:
---------------------------+---------------------------------------
Per https://ubuntu.com/security/CVE-2019-20372

we are running version 1.14 of nginx (released with Ubuntu 18.04)

Need to upgrade to more easily mitigate
https://ubuntu.com/security/CVE-2019-20372.

Will test on osgeo4 first.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2659&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

2

#2659: Upgrade nginx proxy servers on osgeo3, osgeo4, osgeo7 to Ubuntu 20.04,
nginx 1.17+
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------

Comment (by robe):

Done for osgeo4 osgeo4-nginx --

{{{
do-release-upgrade
nginx -v #now reads nginx version: nginx/1.18.0 (Ubuntu)
}}}

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2659#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

3

#2659: Upgrade nginx proxy servers on osgeo3, osgeo4, osgeo7 to Ubuntu 20.04,
nginx 1.17+
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------

Comment (by robe):

Going to start osgeo3, might be a little up and down while doing that.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2659#comment:2&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

4

#2659: Upgrade nginx proxy servers on osgeo3, osgeo4, osgeo7 to Ubuntu 20.04,
nginx 1.17+
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------

Comment (by robe):

Okay looks like osgeo3-nginx is running debian 10 and though it's running
1.14.2, looks like debian has remediated that release for this CVE https
://security-tracker.debian.org/tracker/CVE-2019-20372 so not update is
required.

I'll take care of osgeo7 this coming weekend.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2659#comment:3&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

5

#2659: Upgrade nginx proxy servers on osgeo3, osgeo4, osgeo7 to Ubuntu 20.04,
nginx 1.17+
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------

Comment (by robe):

Okay going to start upgrade on osgeo7 nginx

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2659#comment:4&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

6

#2659: Upgrade nginx proxy servers on osgeo3, osgeo4, osgeo7 to Ubuntu 20.04,
nginx 1.17+
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+----------------------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed

Comment:

Done upgrading osgeo7 nginx container - from Ubuntu 18.04 -> Ubuntu
20.04.3 and from nginx 1.14 to nginx version: nginx/1.18.0 (Ubuntu)

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2659#comment:5&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.