ELSA-2020-5862

ELSA-2020-5862 - olcne nginx security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2020-09-28

Description

olcne
[1.0.8-2]
- Added nginx-image resource in module definitions to ensure nginx image upgrading

[1.0.8-1]
- support upgrading nginx
- Adress CVE-2019-9511
- Adress CVE-2018-16845
- Adress CVE-2017-7529
- support upgrading flannel

nginx
[1.17.7-2]
- Changed nginx home dir to /var/lib/nginx for consistency

[1.17.7-1]
- Added Oracle Specific Build Files for nginx
- Adress CVE-2019-9511
- Adress CVE-2018-16845
- Adress CVE-2017-7529

Related CVEs

CVE-2019-9511

CVE-2018-16845

CVE-2017-7529

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	nginx-1.17.7-2.el7.src.rpm	5e5d0adbe212317ce3f2aa0e1d0e0d56	-
	olcne-1.0.8-2.el7.src.rpm	5e0a586f634c1471a8ce18152e7fa9b7	ELBA-2021-9240
	nginx-1.17.7-2.el7.x86_64.rpm	1a0bb437c4c8226b18c8db71ddd4c034	-
	nginx-all-modules-1.17.7-2.el7.noarch.rpm	235f8295fc3a5e13aa72013227f12804	-
	nginx-filesystem-1.17.7-2.el7.noarch.rpm	e2a26c5d14b32d017cec6c6c2276527b	-
	nginx-mod-http-image-filter-1.17.7-2.el7.x86_64.rpm	7fe121b2f36ae20a9a60c2354d1e6274	-
	nginx-mod-http-perl-1.17.7-2.el7.x86_64.rpm	c5a220d3cc3170a4edbc7a68e92e0462	-
	nginx-mod-http-xslt-filter-1.17.7-2.el7.x86_64.rpm	11f8c32126a612e52ecfb4d2ddc7d5d6	-
	nginx-mod-mail-1.17.7-2.el7.x86_64.rpm	07d6c34d25363f7ec53fc547b42d83dc	-
	nginx-mod-stream-1.17.7-2.el7.x86_64.rpm	ab180e8ceec7b8de6b9e8a03d92cf99c	-
	olcne-agent-1.0.8-2.el7.x86_64.rpm	4493b55b6e99a0909d3a1df09f7eea8b	ELBA-2021-9240
	olcne-api-server-1.0.8-2.el7.x86_64.rpm	051afd59627e5873a46a9eed127a09f5	ELBA-2021-9240
	olcne-nginx-1.0.8-2.el7.x86_64.rpm	36b0560bea4c7be23d8b133377bb20c4	ELBA-2021-9240
	olcne-utils-1.0.8-2.el7.x86_64.rpm	fe13a140095f4a34da528dc8f85c926e	ELBA-2021-9240
	olcnectl-1.0.8-2.el7.x86_64.rpm	d0751ba871d458f9cd25c7bb02d66a9d	ELBA-2021-9240

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team