2 ms·

For Debian 8 (Jessie): There's a newer build of Nginx in jessie-backports with static OpenSSL 1.0.2: http://serverfault.com/questions/775298/debian-jessie-nginx

• nailer 10y ago
  Interesting. What's the maintenance policy for jessie-backports? If it's best-effort it might be better to avoid suggesting people use it for a package as frequently updated as openssl.
  • lstamour 10y ago
    It is indeed best-effort. You can follow along on packaging in https://packages.qa.debian.org/n/nginx.html https://packages.qa.debian.org/n/nginx.html and https://packages.qa.debian.org/o/openssl.html https://packages.qa.debian.org/o/openssl.html as well as backports' security mailing lists. Given what I'm seeing on the Nginx build currently in backports, I might rely on backports for dependencies, but I'd seriously consider building your own Nginx from source and/or pay attention yourself to security warnings.