Red Hat Security AdvisoryRHSA-2018:3653
rh-nginx110-nginx security update
Released 2018-11-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-nginx110-nginx-1:1.10.2-8.el6.1, rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-8.el6.1, rh-nginx110-nginx-mod-http-perl-1:1.10.2-8.el6.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nginx110-nginx-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-perl-1:1.10.2-8.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-nginx110-nginx-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-perl-1:1.10.2-8.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-nginx110-nginx-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-perl-1:1.10.2-8.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-nginx110-nginx-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-perl-1:1.10.2-8.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-nginx110-nginx-1:1.10.2-8.el6.1, rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-8.el6.1, rh-nginx110-nginx-mod-http-perl-1:1.10.2-8.el6.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nginx110-nginx-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-8.el7.1, rh-nginx110-nginx-mod-http-perl-1:1.10.2-8.el7.1 +3
Fixes 2 records
Priority MEDIUM 63
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.47985 · Published 2018-11-07 · Fixed CWE-400
Priority LOW 39
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker proce…
CVSS 3.1MEDIUM 6.1· Local · No auth · User interaction · EPSS 0.09845 · Published 2018-11-07 · Fixed CWE-400
