SUSE-SU-2022:4266-1

Details

This update for nginx fixes the following issues:

CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed (bsc#1187685).

Affected Packages

SUSE:Enterprise Storage 6nginx

Fixed in:

1.16.1-150100.6.16.1

SUSE:Enterprise Storage 6nginx-source

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSnginx

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSnginx-source

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSnginx

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSnginx-source

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise Server 15 SP1-BCLnginx

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise Server 15 SP1-BCLnginx-source

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise Server 15 SP1-LTSSnginx

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise Server 15 SP1-LTSSnginx-source

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1nginx

Fixed in:

1.16.1-150100.6.16.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1nginx-source

Fixed in:

1.16.1-150100.6.16.1

References

REPORThttps://bugzilla.suse.com/1187685 WEBhttps://www.suse.com/security/cve/CVE-2021-3618 ADVISORYhttps://www.suse.com/support/update/announcement/2022/suse-su-20224266-1/

SUSE-SU-2022:4266-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline