Ike.ninja

An update for csi-provisioner-container is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Applications using libpcap could be made to crash if given specially crafted data.

Several vulnerabilities have been discovered in git, a fast, scalable, distributed revision control system. CVE-2019-1348

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

In the December 2019 survey we received responses from 1,268,289,402 sites across 243,753,534 unique domain names and 9,430,985 web-facing computers. This reflects a loss of 40.1 million sites, but a gain of 19,200 domains and 156,000 computers.

nginx gained the largest number of sites (+41.2 million), while Apache lost 50.1 million and Microsoft lost 17.5 million; but in terms of unique domains, all major vendors suffered losses. Microsoft lost the most domains (-2.67 million), followed by Apache (-572,000); and, despite gaining so many sites, nginx lost 422,000 domains.

nginx has continued its strong and steady growth in web-facing computers, this month gaining 58,500 computers compared with Apache’s gain of 42,900. nginx is edging ever-closer to Apache’s leading market share, which fell by 0.13 percentage points to 35.3%, leaving it only 3.4 points ahead of nginx.

If current trends continue, nginx looks set to overtake Apache at some point in late 2020, which would make it the largest vendor in terms of web-facing computers. nginx has already been in the lead by sites since April 2019, and is also closing in on domains, but is still some way behind Apache in active sites and the top million sites.

Vendor news

OpenLiteSpeed 1.6.4 was released on 18 November.
This is the open source version of the LiteSpeed web server, which was first to ship HTTP/3 support
in July, and boldly claims to outperform nginx when handling HTTP/3 traffic. More than 20 million sites across 3.9 million domains are running either LiteSpeed or OpenLiteSpeed – both variants exhibit the same “LiteSpeed” server header.

QUIC and HTTP/3 have been supported by Cloudflare’s partly nginx-based edge network since September; and in October, Cloudflare released a patch that
allows its savoury implementation of these protocols (quiche) to be integrated into the upstream nginx codebase. LiteSpeed’s HTTP/3 benchmarks were carried out against this patch.

On 19 November, Microsoft announced the availability of Microsoft Azure from its new cloud
datacenter regions in Norway. Norway’s largest financial services group, DNB Group, has already chosen the new region to migrate services into the cloud in accordance with Norwegian data handling regulations.

Finally, NGINX Plus Release 20 (R20) was released on 3 December. Based on the open source nginx web server, NGINX Plus is a commercial offering, and R20 includes real-time monitoring and logging of rate-limited traffic, enhancements to
connection limiting, and some security improvements for HTTP/2.

Several security issues were fixed in Samba.

An update for httpd24, httpd24-httpd, and httpd24-nghttp2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which