Дмитрий Васильев (Все сообщения пользователя)

.Changes with nginx 1.26.3                                        05 Feb 2025

    *) Security: insufficient check in virtual servers handling with TLSv1.3
       SNI allowed to reuse SSL sessions in a different virtual server, to
       bypass client SSL certificates verification (CVE-2025-23419).

    *) Bugfix: in the ngx_http_mp4_module.
       Thanks to Nils Bars.

    *) Workaround: "gzip filter failed to use preallocated memory" alerts
       appeared in logs when using zlib-ng.

    *) Bugfix: nginx could not build libatomic library using the library
       sources if the --with-libatomic=DIR option was used.

    *) Bugfix: nginx now ignores QUIC version negotiation packets from
       clients.

    *) Bugfix: nginx could not be built on Solaris 10 and earlier with the
       ngx_http_v3_module.

    *) Bugfixes in HTTP/3.

=============================================================================================
 Package                  Arch      Version                     Repository              Size
=============================================================================================
Installing:
 kernel                   x86_64    5.14.0-503.23.1.el9_5       baseos                 2.0 M
 kernel-core              x86_64    5.14.0-503.23.1.el9_5       baseos                  18 M
 kernel-modules           x86_64    5.14.0-503.23.1.el9_5       baseos                  36 M
 kernel-modules-core      x86_64    5.14.0-503.23.1.el9_5       baseos                  30 M
Upgrading:
 almalinux-gpg-keys       x86_64    9.5-2.el9                   baseos                 9.2 k
 almalinux-release        x86_64    9.5-2.el9                   baseos                  19 k
 almalinux-repos          x86_64    9.5-2.el9                   baseos                 9.3 k
 bzip2                    x86_64    1.0.8-10.el9_5              baseos                  51 k
 bzip2-libs               x86_64    1.0.8-10.el9_5              baseos                  39 k
 firewalld                noarch    1.3.4-9.el9_5               baseos                 452 k
 firewalld-filesystem     noarch    1.3.4-9.el9_5               baseos                 8.6 k
 grub2-common             noarch    1:2.06-93.el9_5.alma.1      baseos                 903 k
 grub2-pc                 x86_64    1:2.06-93.el9_5.alma.1      baseos                  12 k
 grub2-pc-modules         noarch    1:2.06-93.el9_5.alma.1      baseos                 909 k
 grub2-tools              x86_64    1:2.06-93.el9_5.alma.1      baseos                 1.8 M
 grub2-tools-minimal      x86_64    1:2.06-93.el9_5.alma.1      baseos                 603 k
 ipset                    x86_64    7.11-11.el9_5               baseos                  41 k
 ipset-libs               x86_64    7.11-11.el9_5               baseos                  68 k
 iptables-libs            x86_64    1.8.10-11.el9_5             baseos                 397 k
 iptables-nft             x86_64    1.8.10-11.el9_5             baseos                 187 k
 iwl100-firmware          noarch    39.31.5.1-146.3.el9_5       baseos                 188 k
 iwl1000-firmware         noarch    1:39.31.5.1-146.3.el9_5     baseos                 188 k
 iwl105-firmware          noarch    18.168.6.1-146.3.el9_5      baseos                 266 k
 iwl135-firmware          noarch    18.168.6.1-146.3.el9_5      baseos                 275 k
 iwl2000-firmware         noarch    18.168.6.1-146.3.el9_5      baseos                 269 k
 iwl2030-firmware         noarch    18.168.6.1-146.3.el9_5      baseos                 277 k
 iwl3160-firmware         noarch    1:25.30.13.0-146.3.el9_5    baseos                 544 k
 iwl5000-firmware         noarch    8.83.5.1_1-146.3.el9_5      baseos                 185 k
 iwl5150-firmware         noarch    8.24.2.2-146.3.el9_5        baseos                 184 k
 iwl6000g2a-firmware      noarch    18.168.6.1-146.3.el9_5      baseos                 253 k
 iwl6050-firmware         noarch    41.28.5.1-146.3.el9_5       baseos                 210 k
 iwl7260-firmware         noarch    1:25.30.13.0-146.3.el9_5    baseos                  57 M
 kernel-tools             x86_64    5.14.0-503.23.1.el9_5       baseos                 2.3 M
 kernel-tools-libs        x86_64    5.14.0-503.23.1.el9_5       baseos                 2.0 M
 libdav1d                 x86_64    1.5.1-1.el9                 epel                   611 k
 libnfnetlink             x86_64    1.0.1-23.el9_5              baseos                  28 k
 libsoup                  x86_64    2.72.0-8.el9_5.3            appstream              388 k
 linux-firmware           noarch    20250114-146.3.el9_5        baseos                 420 M
 linux-firmware-whence    noarch    20250114-146.3.el9_5        baseos                 107 k
 nodejs                   x86_64    2:20.18.3-1nodesource       nodesource-nodejs       36 M
 os-prober                x86_64    1.77-12.el9_5               baseos                  43 k
 percona-release          noarch    1.0-30                      prel-release-noarch     28 k
 python3-firewall         noarch    1.3.4-9.el9_5               baseos                 355 k
 tzdata                   noarch    2025a-1.el9                 baseos                 429 k
Installing dependencies:
 grub2-tools-efi          x86_64    1:2.06-93.el9_5.alma.1      baseos                 539 k
 grub2-tools-extra        x86_64    1:2.06-93.el9_5.alma.1      baseos                 840 k

TASK [common : commit changes by etckeeper] ************************************
fatal: [имя сервера]: FAILED! => {"changed": true, "cmd": "/usr/bin/etckeeper commit \"commit from ansible task at 2025-02-12 05:02:07\"", "delta": "0:00:00.381918", "end": "2025-02-12 05:02:07.594264", "msg": "non-zero return code", "rc": 1, "start": "2025-02-12 05:02:07.212346", "stderr": "", "stderr_lines": [], "stdout": "nothing changed", "stdout_lines": ["nothing changed"]}

dnf list installed | grep php

dnf remove <имя_пакета>   Удаление пакета

dnf repolist all   Вывод списка всех репозиториев
dnf repoinfo <имя_репозитория>   Информация о репозитории
dnf config-manager --set-disabled <имя_репозитория>   Отключение репозитория
dnf config-manager --set-enabled <имя_репозитория>   Включение репозитория 

dnf upgrade bitrix-env.x86_64

add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options SAMEORIGIN;

allow_url_fopen = Off
session.cookie_secure = On

  1 server {
  2         listen IP_первого сервера:80;
  3
  4         server_name имя домена;
  5         return 301 https://имя.домена$request_uri;
  6 }
  7
  8
  9 server {
 10
 11         listen IP_первого сервера:443 ssl;
 12
 13         ssl_certificate /полный путь/cert.pem;
 14         ssl_certificate_key /полный путь/key.pem;
 15
 16         server_name имя домена;
 17
 18     location / {
 19         proxy_set_header X-Real-IP $remote_addr;
 20         proxy_set_header Host $host;
 21         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 22         proxy_pass http://IP_второго сервера с Web окружением Битрикс:80;
 23     }
 24 }

#proxy_set_header     X-Real-IP $remote_addr;