# Re: Nginx Debian vulnerabilities

**URL:** <https://www.ruby-forum.com/t/re-nginx-debian-vulnerabilities/193194>\
**Category:** NGINX\
**Created:** [August 12, 2010, 8:35pm UTC](https://www.ruby-forum.com/t/re-nginx-debian-vulnerabilities/193194 "2010-08-12T20:35:06Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![unknown](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/u/4bbf92/32.png) [@unknown](https://www.ruby-forum.com/u/unknown)\
**Post date:** [August 12, 2010, 8:35pm UTC](https://www.ruby-forum.com/t/re-nginx-debian-vulnerabilities/193194/1 "2010-08-12T20:35:06Z")

</div>

That’s a fairly old package and likely is still vulnerable. Igor or  
another developer would be best to say whether the Debian team  
integrates patches into their packages. (Igor is on vacation) However,  
personally, I would download the source for the newest legacy version  
(if that’s what you want) and compile it yourself.

There are detailed instructions in the wiki for installation manually.

Prior to doing that, simply use:  
apt-get remove nginx

In either case, vulnerable or not, there were quite a few fixes between  
.2 and .9. You would benefit from the most updated branch of your  
choosing.

-Kevin