NoMachine Support

Your questions answered

Knowledge Base

Searching in: Feature Requests
Filter the search results
Target version:
Products:
Status:
Last update:
Searching in: Feature Requests
ID: FR08Q03862
Added on:  2019-08-19
Last update: 2019-09-17
Priority: Low
Products: NoMachine Web Player
Target: 6
Status:  Implemented
Updating nxhtd to Apache v. 2.4.41

The NoMachine web server, nxhtd, should be updated to the last version of Apache, v. 2.4.41:

http://www.apache.org/dist/httpd/CHANGES_2.4.41

The new Apache version provide a list of fixes, only the following one may potentially affect also nxhtd:

mod_rewrite potential open redirect (CVE-2019-10098)
Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.

As a temporary solution to harden nxhtd, we suggest to disable the http->https redirection.

To do that, please follow instructions at: https://www.nomachine.com/AR07P00986

 

Note:

NoMachine v. 6 and v. 5 at the moment provides nxhtd based on Apache v. 2.4.39.