gpp_maybe Security update for nginx

SUSE-SLE-Module-Server-Applications-15-SP1-2019-2309

This update for nginx fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579). - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580). - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582). - CVE-2018-16845: Fixed denial of service and memory disclosure via mp4 module (bsc#1115015). - CVE-2018-16843: Fixed excessive memory consumption in HTTP/2 implementation (bsc#1115022). - CVE-2018-16844: Fixed excessive CPU usage via flaw in HTTP/2 implementation (bsc#1115025).

• Release Date
  Sep 5 2019
• References
  Bugzilla: 1115015, 1115022, 1115025, 1145582, 1145580, 1145579
  CVEs: CVE-2018-16843, CVE-2018-16845, CVE-2018-16844, CVE-2019-9516, CVE-2019-9511, CVE-2019-9513
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.1 x86_64

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.14.2-6.3.1 lock rpm lock src

  nginx-source
  The nginx source

  1.14.2-6.3.1 lock rpm

Server Applications Module 15.1 ppc64le

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.14.2-6.3.1 lock rpm lock src

  nginx-source
  The nginx source

  1.14.2-6.3.1 lock rpm

Server Applications Module 15.1 aarch64

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.14.2-6.3.1 lock rpm lock src

  nginx-source
  The nginx source

  1.14.2-6.3.1 lock rpm

Server Applications Module 15.1 s390x

• Packages
  nginx
  A HTTP server and IMAP/POP3 proxy server

  1.14.2-6.3.1 lock rpm lock src

  nginx-source
  The nginx source

  1.14.2-6.3.1 lock rpm