RLSA-2023:6120

Synopsis

Moderate: nginx:1.22 security update

Description

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 x86_64

Fixes

2242803

CVEs

CVE-2023-44487

Affected packages

Rocky Linux 9 aarch64 - AppStream

nginx-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.src.rpm nginx-all-modules-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.noarch.rpm nginx-core-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-core-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-debugsource-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-filesystem-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.noarch.rpm nginx-mod-devel-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-http-image-filter-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-http-image-filter-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-http-perl-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-http-perl-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-http-xslt-filter-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-http-xslt-filter-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-mail-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-mail-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-stream-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm nginx-mod-stream-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

nginx-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.src.rpm nginx-all-modules-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.noarch.rpm nginx-core-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-core-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-debugsource-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-filesystem-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.noarch.rpm nginx-mod-devel-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-http-image-filter-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-http-image-filter-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-http-perl-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-http-perl-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-http-xslt-filter-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-http-xslt-filter-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-mail-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-mail-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-stream-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm nginx-mod-stream-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.ppc64le.rpm

Rocky Linux 9 x86_64 - AppStream

nginx-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.src.rpm nginx-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-all-modules-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.noarch.rpm nginx-core-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-core-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-debugsource-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-filesystem-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.noarch.rpm nginx-mod-devel-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-http-image-filter-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-http-image-filter-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-http-perl-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-http-perl-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-http-xslt-filter-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-http-xslt-filter-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-mail-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-mail-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-stream-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm nginx-mod-stream-debuginfo-1:1.22.1-3.module+el9.2.0+15280+45c505d6.1.x86_64.rpm