What is the severity of RHSA-2019:2746?

The severity of RHSA-2019:2746 is important due to denial of service vulnerabilities in HTTP/2.

How do I fix RHSA-2019:2746?

To fix RHSA-2019:2746, you must update to the specified version 1.12.1-3.el7.1 of the affected nginx packages.

Which nginx versions are affected by RHSA-2019:2746?

RHSA-2019:2746 affects nginx versions prior to 1.12.1-3.el7.1.

What vulnerabilities are addressed in RHSA-2019:2746?

RHSA-2019:2746 addresses denial of service vulnerabilities related to large data requests in HTTP/2 and flooding using PRIORITY frames.

Is there a workaround for RHSA-2019:2746?

There are no recommended workarounds for RHSA-2019:2746; the best approach is to update the nginx packages.

Vulnerability/
RHSA-2019:2746

12/9/2019

RHSA-2019:2746: Important: rh-nginx112-nginx security update

First published: Thu Sep 12 2019(Updated: )

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.<br>Security Fix(es):<br><li> HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)</li> <li> HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)</li> <li> HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software	Affected Version	How to fix
redhat/rh-nginx112-nginx	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-debuginfo	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-http-image-filter	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-http-perl	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-http-xslt-filter	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-mail	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-stream	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-debuginfo	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-http-image-filter	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-http-xslt-filter	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-mail	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-stream	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-debuginfo	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-http-image-filter	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-http-xslt-filter	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-mail	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx-mod-stream	<1.12.1-3.el7.1	1.12.1-3.el7.1
redhat/rh-nginx112-nginx	<1.12.1-3.el7.1.aa	1.12.1-3.el7.1.aa
redhat/rh-nginx112-nginx-debuginfo	<1.12.1-3.el7.1.aa	1.12.1-3.el7.1.aa
redhat/rh-nginx112-nginx-mod-http-image-filter	<1.12.1-3.el7.1.aa	1.12.1-3.el7.1.aa
redhat/rh-nginx112-nginx-mod-http-xslt-filter	<1.12.1-3.el7.1.aa	1.12.1-3.el7.1.aa
redhat/rh-nginx112-nginx-mod-mail	<1.12.1-3.el7.1.aa	1.12.1-3.el7.1.aa
redhat/rh-nginx112-nginx-mod-stream	<1.12.1-3.el7.1.aa	1.12.1-3.el7.1.aa

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2019:2746?
The severity of RHSA-2019:2746 is important due to denial of service vulnerabilities in HTTP/2.
How do I fix RHSA-2019:2746?
To fix RHSA-2019:2746, you must update to the specified version 1.12.1-3.el7.1 of the affected nginx packages.
Which nginx versions are affected by RHSA-2019:2746?
RHSA-2019:2746 affects nginx versions prior to 1.12.1-3.el7.1.
What vulnerabilities are addressed in RHSA-2019:2746?
RHSA-2019:2746 addresses denial of service vulnerabilities related to large data requests in HTTP/2 and flooding using PRIORITY frames.
Is there a workaround for RHSA-2019:2746?
There are no recommended workarounds for RHSA-2019:2746; the best approach is to update the nginx packages.

agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/remedy
agent/severity
agent/softwarecombine
agent/tags
agent/title
agent/type
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2019:2746
agent/software-canonical-lookup
package-manager/redhat

Frequently Asked Questions

What is the severity of RHSA-2019:2746?
The severity of RHSA-2019:2746 is important due to denial of service vulnerabilities in HTTP/2.
How do I fix RHSA-2019:2746?
To fix RHSA-2019:2746, you must update to the specified version 1.12.1-3.el7.1 of the affected nginx packages.
Which nginx versions are affected by RHSA-2019:2746?
RHSA-2019:2746 affects nginx versions prior to 1.12.1-3.el7.1.
What vulnerabilities are addressed in RHSA-2019:2746?
RHSA-2019:2746 addresses denial of service vulnerabilities related to large data requests in HTTP/2 and flooding using PRIORITY frames.
Is there a workaround for RHSA-2019:2746?
There are no recommended workarounds for RHSA-2019:2746; the best approach is to update the nginx packages.

RHSA-2019:2746: Important: rh-nginx112-nginx security update

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2019:2746?

How do I fix RHSA-2019:2746?

Which nginx versions are affected by RHSA-2019:2746?

What vulnerabilities are addressed in RHSA-2019:2746?

Is there a workaround for RHSA-2019:2746?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of RHSA-2019:2746?

How do I fix RHSA-2019:2746?

Which nginx versions are affected by RHSA-2019:2746?

What vulnerabilities are addressed in RHSA-2019:2746?

Is there a workaround for RHSA-2019:2746?