Jitsi Meet server upgrade nginx to 1.21

I want to upgrade the nginx version on my Jitsi Meet Ubuntu 20.04 server from 1.18 to 1.21.
However, I can’t seem to figure it out. Has anybody performed those upgrade steps?
I’ll have to repeat on my videobridge servers. I run the videobridge service on other servers as opposed to the primary jitsi meet server.

No need Nginx on JVBs

Do you know the nginx upgrade process on the jitsi meet server to go from 1.18 to 1.21 ?
That’s my primary concern since there’s an exploitable vulnerability on 1.18. I need to upgrade.
I just realized you’re right about the videobridges - for some reason I thought it ran nginx but it doesn’t.

If you installed Nginx from the official Ubuntu repo, it will get the security fixes.

As an alternative, you may add a repo which contains the newer Nginx versions and upgrade to the newer version. But IMO keeping the official repo is better.

Thanks but I don’t understand what you mean. What do I have to do to either upgrade to 1.21 or obtain appropriate fixes? I think nginx was automatically installed when I installed Jitsi. I’m not 100% sure about that but I believe that’s correct. To setup Jitsi meet I used the directions from Self-Hosting Guide - Debian/Ubuntu server | Jitsi Meet

Check the installed nginx packages

dpkg -l "nginx*" | egrep "^ii"

ii  nginx          1.18.0-6.1   all          small, powerful, scalable web/proxy server
ii  nginx-common   1.18.0-6.1   all          small, powerful, scalable web/proxy server - common files
ii  nginx-core     1.18.0-6.1   amd64        nginx web/proxy server (standard version)

and try to upgrade only these packages as root

apt-get update
apt-get install nginx nginx-common nginx-core

If there are new versions in the repo, it will upgrade packages.

Don’t copy-paste the commands. It will be harmful if you don’t understand the process

Thanks. I tried that. I’ll post the output. I’m not sure it did anything. I see dependency errors.
The grep for nginx dpkg looks similar to your output. But I don’t think the upgrade did anything. When I finished the nginx dpkg grep output is identical to the initial output. Not sure what to do.

root@meet3:~# dpkg -l “nginx*” | egrep “^ii”
ii nginx 1.18.0-0ubuntu1.2 all small, powerful, scalable web/proxy server
ii nginx-common 1.18.0-0ubuntu1.2 all small, powerful, scalable web/proxy server - common files
ii nginx-full 1.18.0-0ubuntu1.2 amd64 nginx web/proxy server (standard version)

root@meet3:~# apt-get update

Hit:1 Index of /ubuntu focal InRelease
Get:2 Index of /ubuntu focal-updates InRelease [114 kB]
Get:3 Index of /ubuntu focal-backports InRelease [108 kB]
Get:4 Index of /ubuntu focal-security InRelease [114 kB]
Hit:5 Index of /node_14.x/ focal InRelease
Get:6 Index of /ubuntu bionic-security InRelease [88.7 kB]
Hit:7 https://download.jitsi.org stable/ InRelease
Fetched 425 kB in 0s (1000 kB/s)
Reading package lists… Done

root@meet3:~# apt-get install nginx nginx-common nginx-core

Reading package lists… Done
Building dependency tree
Reading state information… Done
nginx is already the newest version (1.18.0-0ubuntu1.2).
nginx-common is already the newest version (1.18.0-0ubuntu1.2).
nginx-common set to manually installed.
The following packages were automatically installed and are no longer required:
geoip-database libgeoip1 libnginx-mod-http-auth-pam libnginx-mod-http-dav-ext libnginx-mod-http-echo libnginx-mod-http-geoip libnginx-mod-http-geoip2 libnginx-mod-http-subs-filter
libnginx-mod-http-upstream-fair
Use ‘apt autoremove’ to remove them.
Suggested packages:
nginx-doc
The following packages will be REMOVED:
nginx-full
The following NEW packages will be installed:
nginx-core
0 upgraded, 1 newly installed, 1 to remove and 37 not upgraded.
Need to get 425 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 Index of /ubuntu focal-updates/main amd64 nginx-core amd64 1.18.0-0ubuntu1.2 [425 kB]
Fetched 425 kB in 0s (20.6 MB/s)
dpkg: nginx-full: dependency problems, but removing anyway as you requested:
nginx depends on nginx-core (<< 1.18.0-0ubuntu1.2.1~) | nginx-full (<< 1.18.0-0ubuntu1.2.1~) | nginx-light (<< 1.18.0-0ubuntu1.2.1~) | nginx-extras (<< 1.18.0-0ubuntu1.2.1~); however:
Package nginx-core is not installed.
Package nginx-full is to be removed.
Package nginx-light is not installed.
Package nginx-extras is not installed.
nginx depends on nginx-core (>= 1.18.0-0ubuntu1.2) | nginx-full (>= 1.18.0-0ubuntu1.2) | nginx-light (>= 1.18.0-0ubuntu1.2) | nginx-extras (>= 1.18.0-0ubuntu1.2); however:
Package nginx-core is not installed.
Package nginx-full is to be removed.
Package nginx-light is not installed.
Package nginx-extras is not installed.
nginx depends on nginx-core (<< 1.18.0-0ubuntu1.2.1~) | nginx-full (<< 1.18.0-0ubuntu1.2.1~) | nginx-light (<< 1.18.0-0ubuntu1.2.1~) | nginx-extras (<< 1.18.0-0ubuntu1.2.1~); however:
Package nginx-core is not installed.
Package nginx-full is to be removed.
Package nginx-light is not installed.
Package nginx-extras is not installed.
nginx depends on nginx-core (>= 1.18.0-0ubuntu1.2) | nginx-full (>= 1.18.0-0ubuntu1.2) | nginx-light (>= 1.18.0-0ubuntu1.2) | nginx-extras (>= 1.18.0-0ubuntu1.2); however:
Package nginx-core is not installed.
Package nginx-full is to be removed.
Package nginx-light is not installed.
Package nginx-extras is not installed.

(Reading database … 135823 files and directories currently installed.)
Removing nginx-full (1.18.0-0ubuntu1.2) …
Selecting previously unselected package nginx-core.
(Reading database … 135818 files and directories currently installed.)
Preparing to unpack …/nginx-core_1.18.0-0ubuntu1.2_amd64.deb …
Unpacking nginx-core (1.18.0-0ubuntu1.2) …
Setting up nginx-core (1.18.0-0ubuntu1.2) …
Processing triggers for man-db (2.9.1-1) …

root@meet3:~# dpkg -l “nginx*” | egrep “^ii”

ii nginx 1.18.0-0ubuntu1.2 all small, powerful, scalable web/proxy server
ii nginx-common 1.18.0-0ubuntu1.2 all small, powerful, scalable web/proxy server - common files
ii nginx-core 1.18.0-0ubuntu1.2 amd64 nginx web/proxy server (standard version)

You removed the installed nginx-full

I don’t know what you’re saying. What do I need to do to upgrade nginx to 1.21 or patch it?

I think if you install nginx-full again, you won’t have to do anything else

apt-get install nginx-full

When I issue that command, it says nginx-core will be removed. I don’t know if that’s okay or not.
Going back to your original post, when I ran “apt-get install nginx nginx-common nginx-core” should I have done something differently? This is just really confusing.

root@meet3:~# apt-get install nginx-full

Reading package lists… Done
Building dependency tree
Reading state information… Done
Suggested packages:
nginx-doc
The following packages will be REMOVED:
nginx-core
The following NEW packages will be installed:
nginx-full
0 upgraded, 1 newly installed, 1 to remove and 37 not upgraded.
Need to get 425 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] n
Abort.

I just reverted my machine back to an image I took first thing this morning before I tried any of the above suggestions. I want to keep this clean. Output shows:

root@meet3:~# dpkg -l “nginx*” | egrep “^ii”

ii nginx 1.18.0-0ubuntu1.2 all small, powerful, scalable web/proxy server
ii nginx-common 1.18.0-0ubuntu1.2 all small, powerful, scalable web/proxy server - common files
ii nginx-core 1.18.0-0ubuntu1.2 amd64 nginx web/proxy server (standard version)