NGINX Response to the Meltdown and Spectre Vulnerabilities
NGINX Response to the Meltdown and Spectre Vulnerabilities This week, some details about security flaws in several microprocessors were publicly shared; a full disclosure is expected to follow. The flaws take several forms, and have been named Meltdown and Spectre. You can find more information about the scope of both Meltdown and Spectre here: https://meltdownattack.com/ A process (application) running on a server can use these flaws to access the protected memory used by other processes. The bugs can be exploited between processes and across containers, and even in some cloud and virtual environments. Like all other processes, NGINX memory is vulnerable to snooping from another process running on the same host. For servers you control, NGINX strongly recommends that you apply the appropriate OS patches to protect against this. For cloud providers, and other platform providers that you use, we [ more… ]