FEDORA-2021-6bf77566c9 created by heffer 4 months ago for Fedora 33
obsolete

Security: 1-byte memory overwrite might occur during DNS server response processing if the "resolver" directive was used, allowing an attacker who is able to forge UDP packets from the DNS server to cause worker process crash or, potentially, arbitrary code execution (CVE-2021-23017).

This update has been submitted for testing by heffer.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has been pushed to testing.

4 months ago

heffer edited this update.

4 months ago
User Icon frantisekz commented & provided feedback 4 months ago
karma

Works well for some basic use

This update has been obsoleted by nginx-1.20.1-2.fc33.

3 months ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
4 months ago
in testing
4 months ago
modified
4 months ago
BZ#1964820 CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name [fedora-all]
0
0

Automated Test Results