RHSA-2022:0323: Important: nginx:1.20 security update
Published Jan 31, 2022
·Updated
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. The following packages have been upgraded to a later upstream version: nginx (1.20.1). (BZ#2031030)Security Fix(es): nginx: Off-by-one in ngxresolvercopy() when labels are followed by a pointer to a root domain name (CVE-2021-23017) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
54 affected componentsFixes available
redhat/nginx<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-all-modules<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-debugsource<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-filesystem<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-image-filter<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-perl<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-perl-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-xslt-filter<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-mail<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-mail-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-stream<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-stream-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-debugsource<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-image-filter<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-perl<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-perl-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-xslt-filter<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-mail<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-mail-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-stream<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-stream-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-debugsource<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-image-filter<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-perl<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-perl-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-xslt-filter<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-mail<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-mail-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-stream<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx-mod-stream-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644
1.20.1-1.module+el8.5.0+13723+ab304644
redhat/nginx<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-debugsource<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-http-image-filter<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-http-image-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-http-perl<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-http-perl-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-http-xslt-filter<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-http-xslt-filter-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-mail<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-mail-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-stream<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
redhat/nginx-mod-stream-debuginfo<1.20.1-1.module+el8.5.0+13723+ab304644.aa
1.20.1-1.module+el8.5.0+13723+ab304644.aa
Remediation
Event History
Mar 8, 2024
Advisory Published
via Red Hat·05:53 AM
Frequently Asked Questions
1
What is the severity of RHSA-2022:0323?
The severity of RHSA-2022:0323 has been assessed as moderate.
2
How do I fix RHSA-2022:0323?
To fix RHSA-2022:0323, upgrade nginx to version 1.20.1-1.module+el8.5.0+13723+ab304644.
3
Which packages are affected by RHSA-2022:0323?
Affected packages include nginx, nginx-all-modules, nginx-filesystem, nginx-debuginfo, and several nginx module packages.
4
What types of vulnerabilities does RHSA-2022:0323 address?
RHSA-2022:0323 addresses an off-by-one vulnerability in nginx.
5
What is the primary function of nginx in relation to RHSA-2022:0323?
Nginx is a web and proxy server that supports HTTP and other protocols, focusing on high concurrency and low memory usage.