[openSUSE-SU-2017:0361-1] Security update for nginx
Severity
Moderate
Affected Packages
4
CVEs
1
Security update for nginx
This update for nginx fixes the following vulnerability:
- CVE-2016-4450: Remote attackers could have caused a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.
| Package | Affected Version |
|---|---|
 pkg:rpm/opensuse/nginx?arch=x86_64&distro=opensuse-12&repo=suse-package-hub
|
< 1.8.1-9.1 |
|
pkg:rpm/opensuse/nginx?arch=s390x&distro=opensuse-12&repo=suse-package-hub
|
< 1.8.1-9.1 |
|
pkg:rpm/opensuse/nginx?arch=ppc64le&distro=opensuse-12&repo=suse-package-hub
|
< 1.8.1-9.1 |
|
pkg:rpm/opensuse/nginx?arch=aarch64&distro=opensuse-12&repo=suse-package-hub
|
< 1.8.1-9.1 |
- ID
- openSUSE-SU-2017:0361-1
- Severity
- moderate
- Published
-
2017-02-01T21:19:46
(7 years ago) - Modified
-
2017-02-01T21:19:46
(7 years ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
ALAS-2016-715
DSA-3592-1
FEDORA-2016-c329fc4c32
FREEBSD:36CF7670-2774-11E6-AF29-F0DEF16C5C1B
GLSA-201606-06
NGINX:CVE-2016-4450
SUSE-SU-2017:0190-1
USN-2991-1| Source | # ID | Name | URL |
|---|---|---|---|
| Suse | SUSE ratings |
|
|
| Suse | URL of this CSAF notice |
|
|
| Bugzilla | SUSE Bug 982505 |
|
|
| CVE | SUSE CVE CVE-2016-4450 page |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/opensuse/nginx?arch=x86_64&distro=opensuse-12&repo=suse-package-hub | opensuse |
nginx
|
< 1.8.1-9.1 | opensuse-12 | x86_64 | |
| Affected | pkg:rpm/opensuse/nginx?arch=s390x&distro=opensuse-12&repo=suse-package-hub | opensuse |
nginx
|
< 1.8.1-9.1 | opensuse-12 | s390x | |
| Affected | pkg:rpm/opensuse/nginx?arch=ppc64le&distro=opensuse-12&repo=suse-package-hub | opensuse |
nginx
|
< 1.8.1-9.1 | opensuse-12 | ppc64le | |
| Affected | pkg:rpm/opensuse/nginx?arch=aarch64&distro=opensuse-12&repo=suse-package-hub | opensuse |
nginx
|
< 1.8.1-9.1 | opensuse-12 | aarch64 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |