rh-nginx118-nginx-1.18.0-3.el7

エラータID: AXSA:2021-1813:01

Release date: 
Tuesday, June 8, 2021 - 03:14
Subject: 
rh-nginx118-nginx-1.18.0-3.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

* nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name (CVE-2021-23017)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2021-23017
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. rh-nginx118-nginx-1.18.0-3.el7.src.rpm
    MD5: 7fa41a4b109e7d11651a08f47a58da41
    SHA-256: d59ed6c6432307ea4851d5c1043233517ebae01547f4f95c93e1c69e115e4eb7
    Size: 1.03 MB

Asianux Server 7 for x86_64
  1. rh-nginx118-nginx-1.18.0-3.el7.x86_64.rpm
    MD5: 16766fc82a07985228a1d9b0d2d5e9b9
    SHA-256: de00fb766bb312e826f5baa6c3a1fd128343f993ef5c29b2cd52fde1bfefefae
    Size: 551.45 kB
  2. rh-nginx118-nginx-mod-http-image-filter-1.18.0-3.el7.x86_64.rpm
    MD5: e777a2f56f606ab34a525b12fb2d53d1
    SHA-256: 32430fe54547f5b2e4fdf9c89c50d59b9529d10d12ae7105afa1308edd73631b
    Size: 25.15 kB
  3. rh-nginx118-nginx-mod-http-perl-1.18.0-3.el7.x86_64.rpm
    MD5: 12b1d94956c869f4927c1ad93f7770e2
    SHA-256: f9257f03ffdec0056530fe5b2c52b53c960eae87e1b9457cbde308b16bea6b09
    Size: 38.35 kB
  4. rh-nginx118-nginx-mod-http-xslt-filter-1.18.0-3.el7.x86_64.rpm
    MD5: d1fdc571d6851e4acab81b42ee3ca725
    SHA-256: 523c47b74d42ed3a6f8e3155ba1b91296c155ddbf69557d1ae2c1c176a48678a
    Size: 24.33 kB
  5. rh-nginx118-nginx-mod-mail-1.18.0-3.el7.x86_64.rpm
    MD5: a00cd234387e392cb1948020735eead6
    SHA-256: adeec007005e8574ca135186c158e2913b32c7d517de02e415a85353426a05ad
    Size: 52.58 kB
  6. rh-nginx118-nginx-mod-stream-1.18.0-3.el7.x86_64.rpm
    MD5: 343a5893285c7bf825be1d1cc5a086b1
    SHA-256: 3cf8784a4ec14628ff45b40ca141dcb732435734eeb202f9223c056d4eeed1c5
    Size: 80.54 kB