cve nginx

[wirehire]

https://nginx.org/en/security_advisories.html

the nginx comes from freebsd upstream ? because last time , its was long delayed , when it comes to the opnsense repo.

How can we update a critical ( nginx) only wait or can we force update from freebsd?

Greets

[franco]

When FreeBSD updates their vuxml database you can see it pop up in the audit until it's fixed.

If you don't see it there it's better to double-check yourself.


Cheers,
Franco

[wirehire]

hey franco, first thanks for the answer. i see it in the vuxml and i see the new release with the fixes.

i want understood, how the updates from core come to opnsense. the core packages are always from the upstream when i hit the update button? or only when your team it allow in the opnsense repo?

greets , i hope i make my question clear for unstanding.

greets!