Issued:
2019-09-17
Updated:
2019-09-17

RHSA-2019:2799 - Security Advisory

Synopsis

Important: nginx:1.14 security update

Type/Severity

Security Advisory: Important

Topic

An update for the nginx:1.14 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage.

Security Fix(es):

  • HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)
  • HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)
  • HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 1735741 - CVE-2019-9513 HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption
  • BZ - 1741860 - CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service
  • BZ - 1741864 - CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service

CVEs

References

Red Hat Enterprise Linux for x86_64 8

SRPM
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.src.rpm SHA-256: 2cd60492c07100434c02961b9c90be3c3d2134e3b2ced13b04359d27a1a10c8a
x86_64
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 6ab1ef897a3fee7c86739512100f03e9829d11e318cb1da46d154d74a240255f
nginx-all-modules-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 98d459b974547e622dff185c1d5b51c20f0e4411eb7554ad2bf8857b3f503c5c
nginx-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: a71cc3f3d7d24d68fb52d983d2b7da3fd8cc39ea13749ae2fea8d13e5878e5c9
nginx-debugsource-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 844ff660c2271b39f7d87c2a0bf21285b1047e5ff54a50c65c868d718b57c9ed
nginx-filesystem-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 3aa45ca110940ca7fb6132574341be30d7fe9e8c70e53fbd398d88cc2b7f2940
nginx-mod-http-image-filter-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 899ee36f08705a153ced6f76de9ea7487268c01b69e9094fa4ee355757330c36
nginx-mod-http-image-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: e533bede94dbb45f802a6f69f488062028b6e7b426fefb887735b4e7bf58e5ab
nginx-mod-http-perl-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 0901ea996b1f66f6d2df081d4d1a06960253b73affef240577bc0c1f567b4b46
nginx-mod-http-perl-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: ce842f4891599e635019f4be8971c2aa9f73bc325a96e6158eb3c4bf1034fe76
nginx-mod-http-xslt-filter-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: d139bc8699028bba1e713027e1d2f564a6ab2595340d38b085a23ddf0076d3cc
nginx-mod-http-xslt-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 288edbf56fd98d06dd861a8e934ac19efe0ec1000e04af62db387fc91961b406
nginx-mod-mail-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 3f0320612760bb8dcc8314c048a18bc5e322f2b908e2d9cb1641955fed3a4ecc
nginx-mod-mail-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 500deca6736aa44c2fee656c854232230ecd4c64676ebca82925e8a0733e8e2e
nginx-mod-stream-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 2140e1f4927102ddf9164c5dfaae7a1eedf0ec4ea73367ff7a61cc843ca62bf8
nginx-mod-stream-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.x86_64.rpm SHA-256: 823e0512ac2fba18fcf27f349a138d883e5c48ae9df578ad454bf258dd54163b

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.src.rpm SHA-256: 2cd60492c07100434c02961b9c90be3c3d2134e3b2ced13b04359d27a1a10c8a
s390x
nginx-all-modules-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 98d459b974547e622dff185c1d5b51c20f0e4411eb7554ad2bf8857b3f503c5c
nginx-filesystem-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 3aa45ca110940ca7fb6132574341be30d7fe9e8c70e53fbd398d88cc2b7f2940
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 445ab2a065c81530a1c7348500a7f28d1f540b53efb08c83452a665b79976fa9
nginx-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 5cdf439a5aa1164e8b5c5c1f9fdfb5fbf10f19619319a18a9919ff9dac53cdf9
nginx-debugsource-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 0e043e40681430c1beef3afe7bb56a6a1f3d39ea2fa650f72df07e8252979c32
nginx-mod-http-image-filter-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 8dc1800341bc937488a1c3a7ba0c8b8e9d56143bd269973346434b693dfff7e1
nginx-mod-http-image-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: e6f484325d9c6113c8b61621d287d5a86d4171b948b48f46e01d8c303c2379c0
nginx-mod-http-perl-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: ed7e4f7c05c3739954a94cf6659350caaafb0bf125a1d8256dbdc7c3b5503aa1
nginx-mod-http-perl-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: a9be8dc7adc91791e7ee7a0008503688bab06b4d33d1198470d80a80d41c5ed5
nginx-mod-http-xslt-filter-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 110a34efefb4271a2eddf5d2c9fa1fae9a5a455d2f63f3daeb8ab31f012e7b4a
nginx-mod-http-xslt-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 750f09ff034398600aebb6033d6f4f203643d2376030ce582206f14b44d4b947
nginx-mod-mail-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 1fc4c13f1fa58e0382b1d4c1838cb4d530e0a5a167c6f209cdb3d316dd8f2e85
nginx-mod-mail-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 74e670553bc3b1d68d5542acb5396133f7fb4cc5132893787382f2e4469c52bb
nginx-mod-stream-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: fae50bd4478bff61f29273adf2f6634552b927ea490aef358017deb6476e3057
nginx-mod-stream-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.s390x.rpm SHA-256: 2941ecafa350323aec1a2862b2afe04e30f7569bc243dab93fa714d9ea135b0d

Red Hat Enterprise Linux for Power, little endian 8

SRPM
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.src.rpm SHA-256: 2cd60492c07100434c02961b9c90be3c3d2134e3b2ced13b04359d27a1a10c8a
ppc64le
nginx-all-modules-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 98d459b974547e622dff185c1d5b51c20f0e4411eb7554ad2bf8857b3f503c5c
nginx-filesystem-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 3aa45ca110940ca7fb6132574341be30d7fe9e8c70e53fbd398d88cc2b7f2940
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 216446d732c1f3526377cd5056d4c35197dbc4c0873c5e2ad4751dcd0c9c15dd
nginx-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: d2acc97322abda9ee03a69494a8e17ced6a2b7034443fb32620e8a10fe5d6de8
nginx-debugsource-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 139c5041b182c3f22fd7f3e3f7381d490b5824fe503bff18f8c5eb301eb3fc84
nginx-mod-http-image-filter-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 4bb667ddeb592f0186e1f69ea1f210a505e726225072f2af1d3a75cf3530d6d4
nginx-mod-http-image-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 1e6869e538a46d1b3301d116e2108c865907eae66b130bc3be63fbabd6bc92b3
nginx-mod-http-perl-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: b1f37f4af13571bcf07746676a6aead3e67255152464b845451b9bd19ca268ad
nginx-mod-http-perl-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 5e904e14499943ee37bffde9f7148cad147f2caa27f71b139e0ad9d56740d5e0
nginx-mod-http-xslt-filter-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: cc33875ab6b0c00cdc8ae37531d3fd439aff346f086376be2c0a01f69215a8bf
nginx-mod-http-xslt-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 0ea9cf621e49ac60ab6644e55459fe47552e539b4f86f8c1e725e04483ef9333
nginx-mod-mail-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 5d0668f0e2e4a9a2ab3079795cbfc4a50f266a226398b051984a65b53e7f1d07
nginx-mod-mail-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 166abed4449f5496a1bf428a7aa80f4cb9f44df66289f3c35e67f478bf98f4e9
nginx-mod-stream-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: 99f09807a7a300c2264914d790f471fea30082bfbee20f97f615557de4c7e5fa
nginx-mod-stream-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le.rpm SHA-256: cba586c8945b54f899d8eccfd535de54d9d2704b9c00da7fa0b267ccd93c1379

Red Hat Enterprise Linux for ARM 64 8

SRPM
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.src.rpm SHA-256: 2cd60492c07100434c02961b9c90be3c3d2134e3b2ced13b04359d27a1a10c8a
aarch64
nginx-all-modules-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 98d459b974547e622dff185c1d5b51c20f0e4411eb7554ad2bf8857b3f503c5c
nginx-filesystem-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm SHA-256: 3aa45ca110940ca7fb6132574341be30d7fe9e8c70e53fbd398d88cc2b7f2940
nginx-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 369f8f98c109288691103aae66d1d10997c81d165fbc0f97c756d4a91bad8dcd
nginx-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: f2f9e6580fdb94a43cd0b4974ee41e02f864ad30a6dbc1133fdb1ab11f75b412
nginx-debugsource-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 5727fa726a98e779b09462f278aa472b01237ef3dd68dde145d51d6c43089b57
nginx-mod-http-image-filter-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 79962e4120c1e5a25764b787621af5186246aae6cec9ce47bc357cdd9566495e
nginx-mod-http-image-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 079d75892d112cbc05b2e6772a0e86f0926ea14ea49a534d5d26a7971c032774
nginx-mod-http-perl-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 9f14ad8dbabbbd00d86c4496e33ae55a52a96155a79efb19c6dcd47a535d7dc9
nginx-mod-http-perl-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 2dde949ab30f5d11aa6a69bd6fc427d50a2550d7ba03e908dbfd0d222c9c6ca9
nginx-mod-http-xslt-filter-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 968a1d086c3daf85edc5ecb268457750476bd0ff21e334fedf1a596d7a3f935a
nginx-mod-http-xslt-filter-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 93d03c64187e9a551327e2846c1d25895e5c0087975c050d43a39085c76e6d66
nginx-mod-mail-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 2f56f44e2a51dcc4590426bb1a1842b5c7018f0e1d6fce283c8f21930f08b7d0
nginx-mod-mail-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 0b0966b88e400e04f2efebd60daf1aaa34e28dcb7e40d41f62e0dbcfb39084f1
nginx-mod-stream-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: 2a4a4c7064e6e67209c74dc624b384537fa028d8cb3bd0aa173e5b72d2a1185c
nginx-mod-stream-debuginfo-1.14.1-9.module+el8.0.0+4108+af250afe.aarch64.rpm SHA-256: dffa91863795983b8ba74d92dd5f24df649b41fbded9544509acdc08ba69fde3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.