Removing nginx 1.9.x from PHP Buildpack and making nginx 1.11.1 default


Danny Rosen
 

Hi there,

In order to patch a CVE Vulnerability
<http://nginx.org/en/security_advisories.html> the CF Buildpacks team will
be updating the PHP buildpack to include nginx 1.11.1 as the default
version of Nginx.

In order to support use cases where nginx v1.9.15 are in use we have
created a 30 day window in which this version will be kept in the PHP
buildpack. It's notable to mention that nginx 1.8 has been scheduled to be
removed in the *next release* (v.4.3.14) due this week. This notification
was originally posted May 17th
<https://lists.cloudfoundry.org/archives/list/cf-dev(a)lists.cloudfoundry.org/message/WXP6PFYJDGIUZURCGID6DQE3KPSSGM67/>
.

If you need help migrating from 1.8.x or 1.9.x please feel free to contact
us on our public slack channel
<https://github.com/cloudfoundry/php-buildpack#help-and-support>.

Join {cf-dev@lists.cloudfoundry.org to automatically receive all group messages.