ELSA-2023-5713

ELSA-2023-5713 - nginx:1.22 security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-10-17

Description

[1:1.22.1-1.0.1.1]
- Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)

Related CVEs

CVE-2023-44487

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	nginx-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.src.rpm	4b845a3bbd96a307a1df9fab1babb6fc	-	ol8_aarch64_appstream
	nginx-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.aarch64.rpm	cc1a8cac4e3c59005017c4ad7fb92332	-	ol8_aarch64_appstream
	nginx-all-modules-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.noarch.rpm	6e14ee77aa87dae4d6538bd240c0b69a	-	ol8_aarch64_appstream
	nginx-filesystem-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.noarch.rpm	569530960d8e3472066581ffc09d9319	-	ol8_aarch64_appstream
	nginx-mod-devel-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.aarch64.rpm	17f21a1694a281c9b3a7b174014b4fab	-	ol8_aarch64_appstream
	nginx-mod-http-image-filter-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.aarch64.rpm	1d1d49b692b58838ef5ab6610cacbb05	-	ol8_aarch64_appstream
	nginx-mod-http-perl-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.aarch64.rpm	c9bd7a0b991accbbe34cf0eb7e55d068	-	ol8_aarch64_appstream
	nginx-mod-http-xslt-filter-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.aarch64.rpm	3283a55d15536369e9a69817b47da414	-	ol8_aarch64_appstream
	nginx-mod-mail-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.aarch64.rpm	0a0361fbcc6239da4d07114b1308d93a	-	ol8_aarch64_appstream
	nginx-mod-stream-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.aarch64.rpm	db126e2cd84b66c5122f408b1473b0fc	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	nginx-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.src.rpm	4b845a3bbd96a307a1df9fab1babb6fc	-	ol8_x86_64_appstream
	nginx-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.x86_64.rpm	c2be36b5ec3efdde2504422e69175883	-	ol8_x86_64_appstream
	nginx-all-modules-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.noarch.rpm	6e14ee77aa87dae4d6538bd240c0b69a	-	ol8_x86_64_appstream
	nginx-filesystem-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.noarch.rpm	569530960d8e3472066581ffc09d9319	-	ol8_x86_64_appstream
	nginx-mod-devel-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.x86_64.rpm	7b4d3f2e807fb28d4f3d24ba09c13ad2	-	ol8_x86_64_appstream
	nginx-mod-http-image-filter-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.x86_64.rpm	1bb2d1c96b8132f00533448de33d164b	-	ol8_x86_64_appstream
	nginx-mod-http-perl-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.x86_64.rpm	dfc0944f2554896d0e2464fc5a28d346	-	ol8_x86_64_appstream
	nginx-mod-http-xslt-filter-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.x86_64.rpm	8947de1253fd31d86a3b1597ca10e7b7	-	ol8_x86_64_appstream
	nginx-mod-mail-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.x86_64.rpm	d11f656b9b2e7c226842f63c630b6763	-	ol8_x86_64_appstream
	nginx-mod-stream-1.22.1-1.0.1.module+el8.8.0+21180+f87487ef.1.x86_64.rpm	f6079b31bd71dd0791367328a88b5633	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team