1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2020-5859

[ELSA-2020-5859] olcne nginx security update

Severity Important
Affected Packages 15
CVEs 3
Info Packages References Vulnerabilities

olcne
[1.1.6-1]
- support upgrading nginx
- Adress CVE-2019-9511
- Adress CVE-2018-16845
- Adress CVE-2017-7529
- support upgrading flannel

nginx
[1.17.7-2]
- Changed nginx home dir to /var/lib/nginx for consistency

[1.17.7-1]
- Added Oracle Specific Build Files for nginx
- Adress CVE-2019-9511
- Adress CVE-2018-16845
- Adress CVE-2017-7529

Package Affected Version
pkg:rpm/oraclelinux/olcnectl?distro=oraclelinux-7 < 1.1.6-1.el7
pkg:rpm/oraclelinux/olcne-utils?distro=oraclelinux-7 < 1.1.6-1.el7
pkg:rpm/oraclelinux/olcne-prometheus-chart?distro=oraclelinux-7 < 1.1.6-1.el7
pkg:rpm/oraclelinux/olcne-nginx?distro=oraclelinux-7 < 1.1.6-1.el7
pkg:rpm/oraclelinux/olcne-istio-chart?distro=oraclelinux-7 < 1.1.6-1.el7
pkg:rpm/oraclelinux/olcne-api-server?distro=oraclelinux-7 < 1.1.6-1.el7
pkg:rpm/oraclelinux/olcne-agent?distro=oraclelinux-7 < 1.1.6-1.el7
pkg:rpm/oraclelinux/nginx?distro=oraclelinux-7 < 1.17.7-2.el7
pkg:rpm/oraclelinux/nginx-mod-stream?distro=oraclelinux-7 < 1.17.7-2.el7
pkg:rpm/oraclelinux/nginx-mod-mail?distro=oraclelinux-7 < 1.17.7-2.el7
pkg:rpm/oraclelinux/nginx-mod-http-xslt-filter?distro=oraclelinux-7 < 1.17.7-2.el7
pkg:rpm/oraclelinux/nginx-mod-http-perl?distro=oraclelinux-7 < 1.17.7-2.el7
pkg:rpm/oraclelinux/nginx-mod-http-image-filter?distro=oraclelinux-7 < 1.17.7-2.el7
pkg:rpm/oraclelinux/nginx-filesystem?distro=oraclelinux-7 < 1.17.7-2.el7
pkg:rpm/oraclelinux/nginx-all-modules?distro=oraclelinux-7 < 1.17.7-2.el7
ID
ELSA-2020-5859
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2020-5859.html
Published
2020-09-24T00:00:00
(4 years ago)
Modified
2020-09-24T00:00:00
(4 years ago)
Rights
Copyright 2020 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/olcnectl?distro=oraclelinux-7 oraclelinux olcnectl < 1.1.6-1.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/olcne-utils?distro=oraclelinux-7 oraclelinux olcne-utils < 1.1.6-1.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/olcne-prometheus-chart?distro=oraclelinux-7 oraclelinux olcne-prometheus-chart < 1.1.6-1.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/olcne-nginx?distro=oraclelinux-7 oraclelinux olcne-nginx < 1.1.6-1.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/olcne-istio-chart?distro=oraclelinux-7 oraclelinux olcne-istio-chart < 1.1.6-1.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/olcne-api-server?distro=oraclelinux-7 oraclelinux olcne-api-server < 1.1.6-1.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/olcne-agent?distro=oraclelinux-7 oraclelinux olcne-agent < 1.1.6-1.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx?distro=oraclelinux-7 oraclelinux nginx < 1.17.7-2.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx-mod-stream?distro=oraclelinux-7 oraclelinux nginx-mod-stream < 1.17.7-2.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx-mod-mail?distro=oraclelinux-7 oraclelinux nginx-mod-mail < 1.17.7-2.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx-mod-http-xslt-filter?distro=oraclelinux-7 oraclelinux nginx-mod-http-xslt-filter < 1.17.7-2.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx-mod-http-perl?distro=oraclelinux-7 oraclelinux nginx-mod-http-perl < 1.17.7-2.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx-mod-http-image-filter?distro=oraclelinux-7 oraclelinux nginx-mod-http-image-filter < 1.17.7-2.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx-filesystem?distro=oraclelinux-7 oraclelinux nginx-filesystem < 1.17.7-2.el7 oraclelinux-7
Affected pkg:rpm/oraclelinux/nginx-all-modules?distro=oraclelinux-7 oraclelinux nginx-all-modules < 1.17.7-2.el7 oraclelinux-7
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date