ELSA-2020-5495

ELSA-2020-5495 - nginx:1.16 security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-12-18

Description

[1:1.16.1-1.0.1.1]
- Remove Red Hat references [Orabug: 29498217]

[1:1.16.1-1.1]
- Resolves: #1898952 - CVE 2019-20372 nginx:1.16/nginx: HTTP request smuggling
via error pages in http/ngx_http_special_response.c

Related CVEs

CVE-2019-20372

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	nginx-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.src.rpm	61e11bec782d2b3da3cb9760c54e5bf3	-
	nginx-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.aarch64.rpm	abec3593db6d720208743afa3eeecc9a	-
	nginx-all-modules-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.noarch.rpm	a8a63ed2a4b6ca12295f12fc852574f7	-
	nginx-filesystem-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.noarch.rpm	2278c9a11af761374865e08e52f36ea2	-
	nginx-mod-http-image-filter-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.aarch64.rpm	18b1743379cb5b9e896dde21deecf979	-
	nginx-mod-http-perl-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.aarch64.rpm	f9c63a19481440719128b340c77d5516	-
	nginx-mod-http-xslt-filter-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.aarch64.rpm	149c968a0cebffad7df005c94eedd2a3	-
	nginx-mod-mail-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.aarch64.rpm	5f333485c560ef22207184546c18ab29	-
	nginx-mod-stream-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.aarch64.rpm	41abcc26adade3e60590738fb8a232e1	-
Oracle Linux 8 (x86_64)	nginx-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.src.rpm	61e11bec782d2b3da3cb9760c54e5bf3	-
	nginx-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.x86_64.rpm	73e1ab1d77d35287f454362b6de56073	-
	nginx-all-modules-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.noarch.rpm	a8a63ed2a4b6ca12295f12fc852574f7	-
	nginx-filesystem-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.noarch.rpm	2278c9a11af761374865e08e52f36ea2	-
	nginx-mod-http-image-filter-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.x86_64.rpm	00696dee1f366bd61b25271a8e1eb600	-
	nginx-mod-http-perl-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.x86_64.rpm	cae0b3128eba158879b40dd1250075b0	-
	nginx-mod-http-xslt-filter-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.x86_64.rpm	56578734ff9b7efd7ddf2c3a5fe2f5f9	-
	nginx-mod-mail-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.x86_64.rpm	f51bd2a64ed30d17501a64f33be718ad	-
	nginx-mod-stream-1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1.x86_64.rpm	5d153edae6f20577665da9d9c0929bfa	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team