nginx 安全漏洞(CVE-2021-23017) 版本升级

查看当前nginx版本信息

# ./sbin/nginx -V
nginx version: nginx/1.20.1
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC)
configure arguments: --prefix=/home/nginx --add-module=/home/nginx-module/fastdfs-nginx-module-master/src

备份原先二进制文件

# mv nginx nginx-1.20

解压、预配置、make编译，不要make install ，执行make install 会覆盖原先的配置文件

# tar xf nginx-1.22.1.tar.gz

# cd /home/nginx-1.22.1/
# ./configure --prefix=/home/nginx --add-module=/home/nginx-module/fastdfs-nginx-module-master/src
# make

复制 objs 目录下的可执行文件至原先 nginx sbin 下

# cp objs/nginx /home/nginx/sbin/
# ./sbin/nginx -t
ngx_http_fastdfs_set pid=5362
nginx: the configuration file /home/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /home/nginx/conf/nginx.conf test is successful
# ./sbin/nginx -V
nginx version: nginx/1.22.1
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC)
configure arguments: --prefix=/home/nginx --add-module=/home/nginx-module/fastdfs-nginx-module-master/src

回到新版本安装目录执行平滑升级

# cd /home/nginx-1.22.1/
# make upgrade