Fedora alert FEDORA-2017-aecd25b8a9 (nginx)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 26 Update: nginx-1.12.1-1.fc26 
Date:
    	     
 
Wed, 23 Aug 2017 19:56:04 +0000 (UTC)
Message-ID:
    	     
 
<20170823195604.EAEA96098DD6@bastion01.phx2.fedoraproject.org>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-aecd25b8a9
2017-08-23 19:02:17.734087
--------------------------------------------------------------------------------

Name        : nginx
Product     : Fedora 26
Version     : 1.12.1
Release     : 1.fc26
URL         : http://nginx.org/

Summary     : A high performance web server and reverse proxy server
Description :
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and
IMAP protocols, with a strong focus on high concurrency, performance and low
memory usage.

--------------------------------------------------------------------------------
Update Information:

This update includes nginx 1.12.1, fixing CVE-2017-7529, and adds the
http_auth_request module.  See http://mailman.nginx.org/pipermail/nginx-

announce/2017/000200.html for more information on CVE-2017-7529.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1471106 - [patch] enable nginx http_auth_request_module
        https://bugzilla.redhat.com/show_bug.cgi?id=1471106

  [ 2 ] Bug #1469924 - CVE-2017-7529 nginx: Integer overflow in nginx range filter module leading
to memory disclosure [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1469924

--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade nginx' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys

--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org