https://ari.lt/mblog/post/540

[ari@masto.doskel.net]

Microblog - Post #540 - ari.lt

Arija A.'s post #540: the nginx RCE bug is so overplayed it requires ALSR disabled and even then its not guarenteed considering how many servers run alpine with musl i guess theres the risk of a DoS still but, although...

(ari.lt)

the nginx RCE bug is so overplayed
it requires ALSR disabled and even then its not guarenteed considering how many servers run alpine with musl
i guess theres the risk of a DoS still but, although fail2ban & rate limiting greatly mitigate this risk
just use ufw or some other FW, alpine ( if possible ), fail2ban, ensure to drop worker process permissions, and keep your server up to date