Skip to content
OpenAdvisories
Medium ELSA-2020-5495 1 CVE

Moderate: nginx:1.16 security update (Oracle Linux 8)

Published Dec 18, 2020 · Updated Dec 18, 2020

Ecosystem: Oracle Linux

Summary

[1:1.16.1-1.0.1.1]
- Remove Red Hat references [Orabug: 29498217]

[1:1.16.1-1.1]
- Resolves: #1898952 - CVE 2019-20372 nginx:1.16/nginx: HTTP request smuggling
via error pages in http/ngx_http_special_response.c

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 8 nginx 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1
Oracle Linux · 8 nginx-all-modules 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1
Oracle Linux · 8 nginx-filesystem 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1
Oracle Linux · 8 nginx-mod-http-image-filter 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1
Oracle Linux · 8 nginx-mod-http-perl 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1
Oracle Linux · 8 nginx-mod-http-xslt-filter 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1
Oracle Linux · 8 nginx-mod-mail 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1
Oracle Linux · 8 nginx-mod-stream 1:1.16.1-1.0.1.module+el8.3.0+7892+37ea59a5.1

Vulnerabilities 1