Critical Photon OS Security Update - PHSA-2019-0003

Updates of 'python3', 'kubernetes', 'perl', 'openssh', 'libsolv', 'nginx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-3.0-0003

Updates of 'nginx', 'openssh', 'perl', 'kubernetes', 'libsolv', 'python3' packages of Photon OS have been released...

nginx <= 1.3.13 Insecure Log Permissions

The installed version of nginx is prior to or equal to 1.3.13. It is, therefore, affected by a flaw related to creating and handling log files that allows information disclosure due to insecure filesystem permissions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Critical Photon OS Security Update - PHSA-2019-3.0-0002

Updates of 'libtiff', 'libgd', 'nginx', 'curl', 'openjdk8', 'linux-aws', 'linux', 'elasticsearch', 'sqlite', 'linux-secure', 'kibana', 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0002

Updates of 'kibana', 'curl', 'sqlite', 'libgd', 'nginx', 'linux-esx', 'openjdk8', 'libtiff', 'linux', 'elasticsearch', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0211

An update of 'nginx', 'linux' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-0211

Updates of 'nginx', 'linux', 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0132

Updates of 'elasticsearch', 'python3', 'kibana', 'nginx', 'sqlite' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0132

An update of 'kibana', 'python3', 'nginx', 'elasticsearch' packages of Photon OS has been released...

New Relic: Password theft login.newrelic.com via Request Smuggling

Hi, The Rails application at login.newrelic.com is accessed through a proxy written in Golang, and an nginx server. By sending an ambiguous request, an attacker can desynchronize these servers, leaving the socket to the backend poisoned with a harmful response. This response will then be served u...

openSUSE Security Update : nginx (openSUSE-2019-195)

This update for nginx fixes the following issues : nginx was updated to 1.14.2 : - Bugfix: nginx could not be built on Fedora 28 Linux. - Bugfix: in handling of client addresses when using unix domain listen sockets to work with datagrams on Linux. - Change: the logging level of the 'http request...

openSUSE: Security Advisory for nginx (openSUSE-SU-2019:0195-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for nginx (moderate)

openSUSE Security Update: Security update for nginx Announcement ID: openSUSE-SU-2019:0195-1 Rating: moderate References: 1115015 1115022 1115025 Cross-References: CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 SUSE Package Hub for SUSE Linux...

SUSE SLES15 Security Update : nginx (SUSE-SU-2019:0334-1)

This update for nginx to version 1.14.2 fixes the following issues : Security vulnerabilities addressed : CVE-2018-16843 CVE-2018-16844: Fixed an issue whereby a client using HTTP/2 might cause excessive memory consumption and CPU usage bsc1115025 bsc1115022. CVE-2018-16845: Fixed an issue which...

SUSE-SU-2019:0334-1 Security update for nginx

This update for nginx to version 1.14.2 fixes the following issues: Security vulnerabilities addressed: - CVE-2018-16843 CVE-2018-16844: Fixed an issue whereby a client using HTTP/2 might cause excessive memory consumption and CPU usage bsc1115025 bsc1115022. - CVE-2018-16845: Fixed an issue whic...

CVE-2019-7401

NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service router process crash or possibly have unspecified other impact...

CVE-2019-7401

NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service router process crash or possibly have unspecified other impact...

Heap overflow

NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service router process crash or possibly have unspecified other impact...

CVE-2019-7401

NGINX Unit is affected by CVE-2019-7401: a heap-based buffer overflow in the router process when handling specially-crafted requests. Exploitation can cause a denial of service (router process crash) and may have unspecified other impact. Affected is Unit versions before 1.7.1. Reported remediati...

CVE-2019-7401

NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service router process crash or possibly have unspecified other impact...