Subscribe

How to install python3-gixy (noarch)

NGINX configuration static analyzer library

Install

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install python3-gixy

Description

Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection.

RPMs

Danila Vershinin (2026-05-24) - Added support for CVE-2026-9256 detection in nginx configurations. · - Identifies heap memory buffer overflow in ngx_http_rewrite_module. · - Affects nginx versions 0.1.17 to 1.31.0. · - Recommends upgrading to nginx 1.31.1 or 1.30.2 for mitigation. · - Improved compatibility with nginx version checks.
Danila Vershinin (2026-05-22) - Fixed false positive in `origins` for specific host regexes. · - Improved regex handling to prevent incorrect bypass matches. · - Updated regex generation to use sentinel characters. · - Ensured semantic equivalence in regex rewrites. · - Enhanced overall accuracy of URL matching.
Danila Vershinin (2026-05-20) - Fixed named regex capture groups in if blocks to prevent spurious logging. · - Resolved crash on Python 3.11+ for invalid DNS label regexes. · - Improved error handling for regexes with empty or long labels.
Danila Vershinin (2026-05-18) - Added support for 13 new nginx variables in the builtin variable table. · - Eliminated spurious log messages related to missing variables. · - Included new variables for PROXY protocol v2 support. · - Updated variable recognition for improved compatibility with nginx 1.29.5.
Danila Vershinin (2026-05-15) - Added unified nginx CVE advisor for vulnerability reporting. · - Introduced CVE-2026-42945 with high severity rating. · - Reports affected nginx versions and upgrade targets. · - Config-trigger patterns enhance vulnerability reports. · - Mitigation advice provided for identified vulnerabilities. · - Includes regression tests for variable resolution fixes. · - Improved compatibility with nginx configurations.
Danila Vershinin (2026-04-11) - Added new check for regex exact match optimization. · - Improves performance by replacing regex with exact-match locations. · - Supports quick-fix for IDE integrations. · - Only flags case-sensitive regex patterns. · - Enhances NGINX configuration efficiency.