Red Hat Security Advisory

RHSA-2019:2746

rh-nginx112-nginx security update

Released 2019-09-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nginx112-nginx-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1 +3
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-nginx112-nginx-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1 +3
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-nginx112-nginx-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1 +3
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-nginx112-nginx-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1 +3
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-nginx112-nginx-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1 +3
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nginx112-nginx-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1, rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1 +3

Fixes 3 records

TI-2019-06948 CVE-2019-9513 · GHSA-3p35-64mh-v96v

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a…

HIGH 73

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81556 Published 2019-08-13 Partial fix CWE-400

TI-2019-06946 CVE-2019-9511 · GHSA-89fc-749h-w2fj

Some HTTP/2 implementations are vulnerable to window size manipulation and stream…

HIGH 67

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.59547 Published 2019-08-13 Partial fix CWE-400

TI-2019-06951 CVE-2019-9516 · GHSA-6gw7-c226-vg73

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a…

MEDIUM 62

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.57461 Published 2019-08-13 Partial fix CWE-400