[ALAS-2016-655] Amazon Linux AMI 2014.03 - ALAS-2016-655: medium priority package update for nginx

Package updates are available for Amazon Linux AMI that fix the following vulnerabilities:
CVE-2016-0747:
It was discovered that nginx did not limit recursion when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to use an excessive amount of resources if nginx enabled the resolver in its configuration.
1302589:
CVE-2016-0747 nginx: Insufficient limits of CNAME resolution in resolver

CVE-2016-0746:
A use-after-free flaw was found in the way nginx resolved certain CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash or, possibly, execute arbitrary code if nginx enabled the resolver in its configuration.
1302588:
CVE-2016-0746 nginx: use-after-free during CNAME response processing in resolver

CVE-2016-0742:
It was discovered that nginx could perform an out of bound read and dereference an invalid pointer when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash if nginx enabled the resolver in its configuration.
1302587:
CVE-2016-0742 nginx: invalid pointer dereference in resolver