Описание
Security update for nginx
This update for nginx fixes the following issues:
- CVE-2021-23017: nginx DNS resolver off-by-one heap write (bsc#1186126)
This update was imported from the SUSE:SLE-15-SP1:Update update project.
Список пакетов
openSUSE Leap 15.2
nginx-1.16.1-lp152.2.3.1
nginx-source-1.16.1-lp152.2.3.1
vim-plugin-nginx-1.16.1-lp152.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2021:0835-1
- SUSE Security Ratings
- SUSE Bug 1186126
- SUSE CVE CVE-2021-23017 page
Описание
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
Затронутые продукты
openSUSE Leap 15.2:nginx-1.16.1-lp152.2.3.1
openSUSE Leap 15.2:nginx-source-1.16.1-lp152.2.3.1
openSUSE Leap 15.2:vim-plugin-nginx-1.16.1-lp152.2.3.1
Ссылки
- CVE-2021-23017
- SUSE Bug 1186126